CVE-2026-5197: code-projects Student Membership System delete_user.php sql injection

Published Mar 31, 2026

Updated

A vulnerability was found in code-projects Student Membership System 1.0. The affected element is an unknown function of the file /deleteuser.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used.

Affected Software

1 affected component

Code-projects Student Membership System=1.0

Event History

Mar 31, 2026

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·10:16 AM

DescriptionSeverityWeakness

Feb 13, 58282

Event

via FIRST·10:33 PM

Frequently Asked Questions

What is the severity of CVE-2026-5197?

CVE-2026-5197 has been classified as a high severity vulnerability due to its potential for SQL injection, which can lead to unauthorized data access.

How do I fix CVE-2026-5197?

To fix CVE-2026-5197, sanitize and validate all user inputs in the delete_user.php file to prevent SQL injection.

What types of attacks can be performed using CVE-2026-5197?

Using CVE-2026-5197, an attacker can execute arbitrary SQL commands through the ID parameter, leading to data leakage or corruption.

Which software versions are affected by CVE-2026-5197?

CVE-2026-5197 affects version 1.0 of the Code-Projects Student Membership System.

Is CVE-2026-5197 easily exploitable?

Yes, CVE-2026-5197 is easily exploitable if proper input validation measures are not implemented.