Executive brief
College-Notes-Gallery is a web application that manages college notes. A SQL injection vulnerability in the login form allows unauthenticated attackers to bypass authentication and gain unauthorized access to user accounts and the database. An attacker could read, modify, or delete sensitive data including all notes and user information without any valid credentials.
Technical details
The vulnerability exists in login.php where user-supplied "user" and "pass" POST parameters are directly concatenated into SQL queries without parameterized statements or proper input validation. Although the code calls mysqli_real_escape_string(), this function is applied but the results are not used, leaving the query vulnerable. Remote attackers can inject SQL operators (such as OR NOT) to bypass authentication and execute arbitrary SQL commands.
Affected products
- anirbandutta9 College-Notes-Gallery up to commit 8c1cf3d98f30982d069c88ca172612c001eb39f6
Timeline
- 2026-07-20: disclosed: Vulnerability disclosed on GitHub
- 2026-09-22: advisory: CVE-2026-95819 published on NVD