Threats Tagged 'cve-2026-78056'

A SQL injection vulnerability exists in the Dashboard component of the sambitraj Student-Management-System up to commit 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. The issue arises from manipulation of the roll_no or teacher_name arguments, allowing remote attackers to execute SQL injection. The project uses a rolling release model, so specific affected versions are not available. The vulnerability has a CVSS score of 6.3 and is classified as low severity. No patch or vendor response has been provided yet, and no known exploits are currently in the wild.

CVE-2026-78056 is a medium severity SQL injection vulnerability in the Dashboard component of the sambitraj Student-Management-System. The issue arises from improper handling of the roll_no and teacher_name parameters, allowing remote attackers to execute SQL injection attacks. The vulnerability affects versions up to commit 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. The project uses a rolling release model, so specific version numbers are not available. The vulnerability was reported early but has not yet been addressed by the vendor. Exploit code is publicly available, but no known active exploitation in the wild has been reported.