CVE-2026-14658: code-projects Assessment Management marking-scheme.php sql injection
A vulnerability was detected in code-projects Assessment Management 1.0. This vulnerability affects unknown code of the file /lecturer/marking-scheme.php. The manipulation of the argument smarksrange[] results in sql injection. It is possible to launch the attack remotely. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2026-14658?
CVE-2026-14658 is a SQL Injection vulnerability in Code-projects Assessment Management affecting the marking-scheme.php file.
What is the severity of CVE-2026-14658?
The severity of CVE-2026-14658 is rated medium with a score of 6.3.
How do I fix CVE-2026-14658?
To fix CVE-2026-14658, sanitize and validate all user inputs in the smarksrange[] parameter to prevent SQL injection.
Can CVE-2026-14658 be exploited remotely?
Yes, CVE-2026-14658 can be exploited remotely, allowing attackers to manipulate the database.
What are the potential risks of CVE-2026-14658?
The potential risks of CVE-2026-14658 include unauthorized access to sensitive data and modification of the database.