HIGH

CVE-2026-90514

2026-09-13 CVSS v3.1

CVSS

7.3

Description

A vulnerability has been found in SourceCodester School Registration and Fee System 1.0. Impacted is an unknown function of the file /bilal/normal/save_stud.php. Such manipulation of the argument Status leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Weakness (CWE)

CWE-74 Injection

CWE-89 SQL Injection

EPSS Score

0.26%

Probability of exploitation in next 30 days

18.5th percentile

References

https://github.com/zuojiu567/cve/issues/1 https://vuldb.com/cve/CVE-2026-90514 https://vuldb.com/submit/912050 https://vuldb.com/vuln/403101 https://vuldb.com/vuln/403101/cti https://www.sourcecodester.com/

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE