CVE-2026-7545: SourceCodester Advanced School Management System checkEmail Endpoint commonController.php sql injection
A weakness has been identified in SourceCodester Advanced School Management System 1.0. The affected element is an unknown function of the file commonController.php of the component checkEmail Endpoint. This manipulation causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7545?
CVE-2026-7545 is classified as a critical SQL injection vulnerability.
How do I fix CVE-2026-7545?
To fix CVE-2026-7545, you should sanitize user inputs in the checkEmail function of commonController.php.
What are the potential impacts of CVE-2026-7545?
Exploiting CVE-2026-7545 could allow an attacker to perform unauthorized actions on the database, potentially leading to data breaches.
Which version of the SourceCodester Advanced School Management System is affected by CVE-2026-7545?
CVE-2026-7545 affects version 1.0 of the SourceCodester Advanced School Management System.
How can I determine if my system is vulnerable to CVE-2026-7545?
You can determine if your system is vulnerable by checking if you are using version 1.0 of the SourceCodester Advanced School Management System and assessing the implementation of the checkEmail function.