Skip to content
SQL Injection Vulnerability in sumiie24 School Management System

SQL Injection Vulnerability in sumiie24 School Management System

First seen 4 Nov 2026, 07:49 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 4, 2026 at 07:50 UTC
  • •CVE-2026-121524 allows SQL injection via email parameter in sumiie24 School-Management-System.
  • •The vulnerability affects versions up to d946d649c7c95e101fc5679ecd91999533bb10d7.
  • •No vendor response or patch has been provided, increasing risk for schools using this system.

A SQL injection vulnerability (CVE-2026-121524) has been identified in the sumiie24 School-Management-System, affecting versions up to d946d649c7c95e101fc5679ecd91999533bb10d7. The flaw resides in the parent_Login.php file, allowing remote attackers to exploit the email parameter. This vulnerability could lead to unauthorized access to sensitive school-related records or service disruptions. The vendor has not responded to disclosure attempts, and no patch or fix has been announced. Schools and educational institutions using this system are particularly at risk, especially if the affected feature is accessible to the public. The exploit has been published, raising the urgency for affected organizations to take action. Security professionals are advised to monitor for unusual database activity and implement compensating controls until a fix is available.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 2h ago How this analysis works

Timeline

2026-11-03
CVE-2026-121524 published
A SQL injection vulnerability in sumiie24 School-Management-System was disclosed, affecting specific versions.
Sploitus
2026-11-04
CVE alert issued
Redpacketsecurity issued a high-priority alert regarding the SQL injection vulnerability, emphasizing the risk to educational institutions.
Redpacketsecurity

More articles in this cluster (6)

Following this threat?

Track Education and CVE-2026-121524 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (6)

1 / 4

Common questions

What versions are affected?
The vulnerability affects the sumiie24 School-Management-System up to version d946d649c7c95e101fc5679ecd91999533bb10d7.
Is there a patch available?
No, the vendor has not provided a patch or fix for this vulnerability as of now.
What should schools do to protect themselves?
Schools should restrict public access to the affected feature, monitor database activity, and implement parameterized queries as a temporary measure.