CVE-2026-2158: code-projects Student Web Portal check_user.php sql injection
Published Feb 8, 2026
·Updated
A vulnerability was detected in code-projects Student Web Portal 1.0. This impacts an unknown function of the file /checkuser.php. Performing a manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely.
Affected Software
2 affected components
Code-projects Student Web Portal
Carmelo Student Web Portal=1.0
Event History
Feb 8, 2026
CVE Published
via MITRE·03:02 PM
Data Sourced
via MITRE·03:02 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-2158?
CVE-2026-2158 has a high severity ranking due to the potential for SQL injection attacks.
2
How do I fix CVE-2026-2158?
To fix CVE-2026-2158, validate and sanitize user inputs in the check_user.php file to prevent SQL injection.
3
What are the potential impacts of CVE-2026-2158?
The exploitation of CVE-2026-2158 can lead to unauthorized access to sensitive data and potential data manipulation.
4
Is CVE-2026-2158 easy to exploit?
Yes, CVE-2026-2158 can be easily exploited with basic knowledge of SQL injection techniques.
5
Which software is affected by CVE-2026-2158?
CVE-2026-2158 affects version 1.0 of the code-projects Student Web Portal.