CVE-2026-5198

code-projects Student Membership System Admin Login index.php sql injection

CVSS 6.9 MEDIUMEPSS 0.3%CWE-74 CWE-89

A vulnerability was determined in code-projects Student Membership System 1.0. The impacted element is an unknown function of the file /admin/index.php of the component Admin Login. This manipulation of the argument username/password causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Affected products

code-projects · Student Membership System

public PoCs found — 1

cve_referencegithub.com/maidangdang1/CVE/issues/4unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://code-projects.org/https://github.com/maidangdang1/CVE/issues/4 https://vuldb.com/submit/780403 https://vuldb.com/vuln/354296 https://vuldb.com/vuln/354296/cti