CVE-2026-5196: code-projects Student Membership System delete_member.php sql injection

Published Mar 31, 2026

Updated

A vulnerability has been found in code-projects Student Membership System 1.0. Impacted is an unknown function of the file /deletemember.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected Software

1 affected component

Code-projects Student Membership System=1.0

Event History

Mar 31, 2026

CVE Published

via MITRE·09:00 AM

Data Sourced

via MITRE·09:00 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·09:16 AM

DescriptionSeverityWeakness

Feb 13, 58282

Event

via FIRST·01:59 PM

Frequently Asked Questions

What is the severity of CVE-2026-5196?

CVE-2026-5196 is considered a high severity vulnerability due to its potential for SQL injection.

How does CVE-2026-5196 exploit SQL injection?

CVE-2026-5196 exploits SQL injection through unvalidated input in the ID parameter of delete_member.php.

What versions of Software are affected by CVE-2026-5196?

CVE-2026-5196 affects version 1.0 of the Code-projects Student Membership System.

How can I protect my application from CVE-2026-5196?

To protect against CVE-2026-5196, sanitize and validate all input data before processing it in SQL queries.

Is there a patch available for CVE-2026-5196?

As of now, there is no officially released patch for CVE-2026-5196, so immediate mitigation measures should be taken.