CVE-2026-5198: code-projects Student Membership System Admin Login index.php sql injection

Published Mar 31, 2026

Updated

A vulnerability was determined in code-projects Student Membership System 1.0. The impacted element is an unknown function of the file /admin/index.php of the component Admin Login. This manipulation of the argument username/password causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.

Affected Software

1 affected component

Code-projects Student Membership System=1.0

Event History

Mar 31, 2026

CVE Published

via MITRE·11:00 AM

Data Sourced

via MITRE·11:00 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·12:16 PM

DescriptionSeverityWeakness

Feb 13, 58282

Event

via FIRST·05:58 PM

Frequently Asked Questions

What is the severity of CVE-2026-5198?

CVE-2026-5198 is classified as a high severity vulnerability due to its potential for SQL injection attacks.

How do I fix CVE-2026-5198?

To fix CVE-2026-5198, validate and sanitize user input in the admin login functionality to prevent SQL injection.

What software is affected by CVE-2026-5198?

CVE-2026-5198 affects version 1.0 of the Code-Projects Student Membership System.

What type of vulnerability is CVE-2026-5198?

CVE-2026-5198 is an SQL injection vulnerability that allows an attacker to manipulate database queries.

Which file is exploited in CVE-2026-5198?

CVE-2026-5198 exploits the /admin/index.php file in the Student Membership System.