SQL Injection Vulnerabilities in Simple Student Alumni System

SQL Injection Vulnerabilities in Simple Student Alumni System

First seen 4 Mar 2026, 01:11 UTC Nvd.Nist 44.7

Article Content

Browse articles
ThreatCluster

The Simple Student Alumni System v1.0 is affected by SQL injection vulnerabilities, specifically in the /TracerStudy/modal_edit.php file. Two CVEs have been published detailing these vulnerabilities, which can lead to information disclosure and local privilege escalation without user interaction. The vulnerabilities were published on the same date, March 2, 2026.

Timeline

2026-03-02
CVE-2026-26698 published
2026-03-02
CVE-2025-48650 published
2026-03-03
Articles published detailing vulnerabilities