CVE-2026-90514: SourceCodester School Registration and Fee System save_stud.php sql injection

Published Sep 13, 2026

Updated

A vulnerability has been found in SourceCodester School Registration and Fee System 1.0. Impacted is an unknown function of the file /bilal/normal/savestud.php. Such manipulation of the argument Status leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Affected Software

1 affected component

SourceCodester School Registration and Fee System=1.0

Event History

Sep 13, 2026

CVE Published

via MITRE·11:00 AM

Data Sourced

via MITRE·11:00 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Who is exposed to this issue?

Deployments of SourceCodester School Registration and Fee System 1.0 that expose the /bilal/normal/save_stud.php endpoint are potentially exposed. The vulnerable Status argument can be manipulated remotely.

What does an attacker need to exploit it?

The issue is remotely exploitable with low attack complexity and requires no privileges or user interaction, according to the supplied vector. Public exploit disclosure means attackers may already have usable exploit details.

What is the likely impact of successful exploitation?

Successful SQL injection can affect confidentiality, integrity, and availability at a low impact level for each, as reflected in the supplied CVSS vector. The exact database actions or data exposed are not specified.

CVE-2026-90514: SourceCodester School Registration and Fee System save_stud.php sql injection

Affected Software

Event History

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

What is the likely impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

What is the likely impact of successful exploitation?