ByteOS Network

CVE Vulnerability Details :

CVE-2026-11531

PUBLISHED

More Info Official Page

Assigner-VulDB

Assigner Org ID-1af790b2-7ee1-4545-860a-a788eba489b5

Published At-08 Jun, 2026 | 16:00

Updated At-08 Jun, 2026 | 16:00

▼CVE Numbering Authority (CNA)

imvks786 student_management_system Administrator Login Endpoint admin_login.php sql injection

A security flaw has been discovered in imvks786 student_management_system up to 9599b560ad3c3b83e75d328b76bedcd489ef1f46. This impacts an unknown function of the file admin/admin_login.php of the component Administrator Login Endpoint. Performing a manipulation of the argument a_usr/a_pwd results in sql injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The project was informed of the problem early through an issue report but has not responded yet.

Affected Products

Vendor

imvks786

Product

student_management_system

CPEs

cpe:2.3:a:imvks786:student_management_system:*:*:*:*:*:*:*:*

Modules

Administrator Login Endpoint

Versions

Affected

9599b560ad3c3b83e75d328b76bedcd489ef1f46

Problem Types

Type	CWE ID	Description
CWE	CWE-89	SQL Injection
CWE	CWE-74	Injection

Type: CWE

CWE ID: CWE-89

Description: SQL Injection

Type: CWE

CWE ID: CWE-74

Description: Injection

Metrics

Version	Base score	Base severity	Vector
4.0	6.9	MEDIUM	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
3.1	7.3	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
3.0	7.3	HIGH	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
2.0	7.5	N/A	AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR

Version: 4.0

Base score: 6.9

Base severity: MEDIUM

Vector:

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Version: 3.1

Base score: 7.3

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

Version: 3.0

Base score: 7.3

Base severity: HIGH

Vector:

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

Version: 2.0

Base score: 7.5

Base severity: N/A

Vector:

AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR

Credits

reporter

Yeliuyun (VulDB User)

coordinator

VulDB CNA Team

Timeline

Event	Date
Advisory disclosed	2026-06-07 00:00:00
VulDB entry created	2026-06-07 02:00:00
VulDB entry last update	2026-06-07 21:58:38

Event: Advisory disclosed

Date: 2026-06-07 00:00:00

Event: VulDB entry created

Date: 2026-06-07 02:00:00

Event: VulDB entry last update

Date: 2026-06-07 21:58:38

References

Hyperlink	Resource
https://vuldb.com/vuln/369148	vdb-entry technical-description
https://vuldb.com/vuln/369148/cti	signature permissions-required
https://vuldb.com/cve/CVE-2026-11531	third-party-advisory
https://vuldb.com/submit/836633	third-party-advisory
https://github.com/imvks786/student_management_system/issues/2	exploit issue-tracking
https://github.com/imvks786/student_management_system/	product