A vulnerability was detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. (CVE-2026-78056)
A SQL injection vulnerability exists in the Dashboard component of the sambitraj Student-Management-System up to commit 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. The issue arises from manipulation of the roll_no or teacher_name arguments, allowing remote attackers to execute SQL injection. The project uses a rolling release model, so specific affected versions are not available. The vulnerability has a CVSS score of 6.3 and is classified as low severity. No patch or vendor response has been provided yet, and no known exploits are currently in the wild.
AI Analysis
Technical Summary
The sambitraj Student-Management-System contains a SQL injection vulnerability in an unspecified functionality of the Dashboard component. Attackers can manipulate the roll_no or teacher_name parameters to inject SQL commands remotely. The system uses a rolling release, so exact affected versions cannot be determined. The vulnerability is tracked as CVE-2026-78056 with a CVSS 3.1 score of 6.3 (AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L). The project was notified but has not responded or issued a fix. Exploit code is publicly available, but no active exploitation is reported.
Potential Impact
Successful exploitation allows remote attackers with low privileges to perform SQL injection attacks, potentially leading to limited confidentiality, integrity, and availability impacts. The CVSS vector indicates low complexity and no user interaction required, but privileges are needed. The impact is rated low due to limited scope and required privileges. No known active exploitation has been observed.
Mitigation Recommendations
No official fix or patch is currently available, and the vendor has not responded to the issue report. Users should monitor the vendor's communications for updates. Until a fix is provided, restricting access to the Dashboard component and validating or sanitizing inputs for roll_no and teacher_name parameters may help mitigate risk. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.
A vulnerability was detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. (CVE-2026-78056)
Description
A SQL injection vulnerability exists in the Dashboard component of the sambitraj Student-Management-System up to commit 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. The issue arises from manipulation of the roll_no or teacher_name arguments, allowing remote attackers to execute SQL injection. The project uses a rolling release model, so specific affected versions are not available. The vulnerability has a CVSS score of 6.3 and is classified as low severity. No patch or vendor response has been provided yet, and no known exploits are currently in the wild.
CVSS v3.1
Score 6.3medium
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The sambitraj Student-Management-System contains a SQL injection vulnerability in an unspecified functionality of the Dashboard component. Attackers can manipulate the roll_no or teacher_name parameters to inject SQL commands remotely. The system uses a rolling release, so exact affected versions cannot be determined. The vulnerability is tracked as CVE-2026-78056 with a CVSS 3.1 score of 6.3 (AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L). The project was notified but has not responded or issued a fix. Exploit code is publicly available, but no active exploitation is reported.
Potential Impact
Successful exploitation allows remote attackers with low privileges to perform SQL injection attacks, potentially leading to limited confidentiality, integrity, and availability impacts. The CVSS vector indicates low complexity and no user interaction required, but privileges are needed. The impact is rated low due to limited scope and required privileges. No known active exploitation has been observed.
Mitigation Recommendations
No official fix or patch is currently available, and the vendor has not responded to the issue report. Users should monitor the vendor's communications for updates. Until a fix is provided, restricting access to the Dashboard component and validating or sanitizing inputs for roll_no and teacher_name parameters may help mitigate risk. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-2vw9-w32g-2c7c
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-78056"]
- Ecosystems
- []
- Database Specific Severity
- LOW
- Cvss Version
- 3.1
Threat ID: 6a8af9a1acd9273b49f32e9b
Added to database: 08/23/2026, 13:46:09 UTC
Last enriched: 08/23/2026, 13:48:28 UTC
Last updated: 08/23/2026, 23:51:58 UTC
Views: 7
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.