CVE-2026-119619

A vulnerability was found in 37954679 cak-filemanagement-system up to 5e6433246475e66462e1fea980688de96a049297. This affects the function mysqliquery of the file admin/savestudent.php. Performing a manipulation of the argument date/department/subject/forwardedto/actiontakenby/section/password...

CVE-2026-119619 37954679 cak-filemanagement-system save_student.php mysqli_query sql injection

A vulnerability was found in 37954679 cak-filemanagement-system up to 5e6433246475e66462e1fea980688de96a049297. This affects the function mysqliquery of the file admin/savestudent.php. Performing a manipulation of the argument date/department/subject/forwardedto/actiontakenby/section/password...

CVE-2026-119619

The cak-filemanagement-system (up to version 5e6433246475e66462e1fea980688de96a049297) is vulnerable to a SQL injection via the mysqli_query function in the admin/save_student.php file. An attacker can remotely trigger this vulnerability by manipulating the date, department, subject, forwarded_to...

EUVD-2026-114257

A vulnerability was found in 37954679 cak-filemanagement-system up to 5e6433246475e66462e1fea980688de96a049297. This affects the function mysqliquery of the file admin/savestudent.php. Performing a manipulation of the argument date/department/subject/forwardedto/actiontakenby/section/password...

CVE-2026-119619: 37954679 cak-filemanagement-system: A vulnerability was found in 37954679 cak-filemanagement-system up to 5e6433246475e66462e1fea980688de96a049297

A vulnerability was found in 37954679 cak-filemanagement-system up to 5e6433246475e66462e1fea980688de96a049297. This affects the function mysqliquery of the file admin/savestudent.php. Performing a manipulation of the argument date/department/subject/forwardedto/actiontakenby/section/password...

CVE-2025-14640: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in code-projects Student File Management System 1.0. The affected element is an unknown function of the file /admin/savestudent.php. Executing manipulation of the argument studno can lead to sql injection. The attack may be launched remotely. The exploit has been published a...

CVE-2025-11062: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in Campcodes Online Learning Management System 1.0. This vulnerability affects unknown code of the file /admin/savestudent.php. Executing manipulation of the argument classid can lead to sql injection. The attack may be performed from remote. The exploit has been...