Executive brief
Student-Registration-System is a web application for managing student registration and account settings. A SQL injection vulnerability in the password change function allows unauthenticated attackers to manipulate database queries by injecting malicious code through the old password field, potentially exposing or modifying sensitive student and administrative data.
Technical details
A SQL injection vulnerability exists in /student/changepass.php within the password change functionality. The vulnerable parameter is "oldpass", which is not properly sanitized before being used in a database query. An attacker can remotely exploit this vulnerability without authentication by crafting a malicious SQL payload in the oldpass argument to execute arbitrary SQL commands. This can lead to unauthorized data access, modification, or deletion of database records. The vulnerability has been publicly disclosed and proof-of-concept code is available on GitHub.
Affected products
- lavkush-maurya Student-Registration-System 1.0
Timeline
- 2026-08-05: disclosed
- 2026-08-05: advisory: CVE-2026-18896 published