CVE-2026-119619mediumCWE-74CWE-89

CVE-2026-119619: fallo de gravedad media en 37954679 cak-filemanagement-system

37954679 cak-filemanagement-system save_student.php mysqli_query sql injection

Publicada el

Seguir esta CVE+ Monitorear cak-filemanagement-system

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

33Vexday Risk Score

Sin señal de explotación. Ella tiene prueba de concepto pública.

ssvc Attendcvss 6.9epss 0.3%
A vulnerability was found in 37954679 cak-filemanagement-system up to 5e6433246475e66462e1fea980688de96a049297. This affects the function mysqli_query of the file admin/save_student.php. Performing a manipulation of the argument date/department/subject/forwarded_to/action_taken_by/section/password results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Productos afectados
37954679 · cak-filemanagement-system
⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
CVEs relacionadas — 37954679 cak-filemanagement-system

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-119620MEDIUM37954679 cak-filemanagement-system add_logs.php move_uploaded_file unrestricted uploadEPSS 0.5%