CVE-2026-10620: code-projects Student Admission System index.php sql injection
A flaw has been found in code-projects Student Admission System 1.0. Affected is an unknown function of the file /index.php. This manipulation of the argument eid/did causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Modify /index.php so all database access uses parameterized queries/prepared statements and enforce strict validation and sanitization of the eid and did parameters (type checks, length limits, allowlist of values) to prevent SQL injection.
code-projects Student Admission System (index.php) eid/did input handling = use prepared statements; validate and sanitize inputs - Compensating control
Deploy a web application firewall or intrusion prevention rule set to detect and block SQL injection attempts targeting the application (including payloads in eid and did parameters). If possible, restrict access to the application or management interfaces to trusted IP ranges until the code is fixed.
- Operational
Search application and database logs for signs of exploitation (requests to index.php with malicious payloads, unexpected queries, or abnormal DB activity). If compromise is suspected, rotate any database credentials and restore affected components from known-good backups after fixing the vulnerability.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-10620?
The severity of CVE-2026-10620 is rated as high with a score of 7.3.
How do I fix CVE-2026-10620?
To fix CVE-2026-10620, ensure that input validation and parameterized queries are implemented in the affected SQL queries.
What type of vulnerability is CVE-2026-10620?
CVE-2026-10620 is classified as an SQL Injection vulnerability.
Can CVE-2026-10620 be exploited remotely?
Yes, CVE-2026-10620 can be exploited remotely due to the vulnerability in the /index.php file.
What is affected by CVE-2026-10620?
CVE-2026-10620 affects the Code-projects Student Admission System version 1.0.