Threats affecting pkg:github/lavkush-maurya/Student-Registration-System

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.3%	CVE-2026-18896lavkush-maurya Student-Registration-System · SQL Injection Medium5.3EPSS 0.3%2026-08-05CVE Database V5CVE-2026-18896 CVE-2026-18896 is a medium severity SQL injection vulnerability in lavkush-maurya Student-Registration-System version 1.0. The flaw exists in an unknown function within the /student/changepass.php file, where manipulation of the 'oldpass' argument allows remote attackers to perform SQL injection. The vulnerability has been publicly disclosed, but no patch or vendor response is currently available. EPSS 0.3%Vulnerability	CVE Database V5	2026-08-05

Page 1 of 1