CVE-2026-10111: sambitraj STUDENT-MANAGEMENT-SYSTEM Login Page sql injection
A flaw has been found in sambitraj STUDENT-MANAGEMENT-SYSTEM 1.0. This impacts an unknown function of the component Login Page. Executing a manipulation of the argument email can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
sambitraj STUDENT-MANAGEMENT-SYSTEMfrom your environment.If the application is not required, uninstall or take the application offline until a secure fix is implemented.
- Configuration
Modify the login handling code to use parameterized SQL queries (prepared statements) or safe ORM methods and validate/sanitize the 'email' parameter to prevent SQL injection.
sambitraj STUDENT-MANAGEMENT-SYSTEM Login Page email input handling = use parameterized queries and validate/sanitize input - Compensating control
Deploy a Web Application Firewall (WAF) or input-filtering rules to block SQL injection payloads targeting the login page, and consider restricting access to the login page to trusted IP ranges or via VPN until the code is fixed.
- Operational
Because a public exploit exists, review application and authentication logs for suspicious activity, rotate/reset passwords and session tokens for potentially affected accounts, and revoke any credentials that may have been exposed.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-10111?
CVE-2026-10111 has a severity score of 7.3, categorizing it as high risk.
How do I fix CVE-2026-10111?
To mitigate CVE-2026-10111, ensure proper input validation and use prepared statements to prevent SQL injection in the Login Page.
What type of vulnerability is CVE-2026-10111?
CVE-2026-10111 is an SQL Injection vulnerability affecting the Login Page of the sambitraj STUDENT-MANAGEMENT-SYSTEM.
Can CVE-2026-10111 be exploited remotely?
Yes, CVE-2026-10111 can be exploited remotely through manipulation of the email argument.
When was CVE-2026-10111 published?
CVE-2026-10111 was published on May 30, 2026.