Threats Tagged 'cve-2026-105920'

A SQL injection vulnerability exists in the Kusalkasilva Learning-Management-System in the student_signup.php file's Student Registration Endpoint. This vulnerability allows remote attackers to manipulate SQL queries, potentially impacting confidentiality, integrity, and availability. The vulnerability has been publicly disclosed, but no official response or patch from the project is available yet. The product uses a rolling release model, so specific affected versions are not identified. The CVSS score is 7.3, indicating a medium severity risk.

CVE-2026-105920 is a SQL injection vulnerability in the Kusalkasilva Learning-Management-System affecting the student_signup.php file within the Student Registration Endpoint. The vulnerability allows remote attackers to manipulate SQL queries, potentially compromising the database. The product uses a rolling release model, so specific affected versions are not identified. The issue was reported early to the project, but no response or fix has been provided yet. The vulnerability has a CVSS 4.0 base score of 6.9, indicating medium severity. Public exploit details have been disclosed, but no known active exploitation in the wild is reported.