← Database

CVE-2026-2158

HIGH CVSS: 7.3 Published: 2026-02-08 Modified: 2026-06-17

Description

A vulnerability was detected in code-projects Student Web Portal 1.0. This impacts an unknown function of the file /check_user.php. Performing a manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely.

Affected Platforms

Carmelo Student Web Portal

Weakness Type

CWE-74, CWE-89, CWE-89

References