CVE-2026-26697 - Vulnerability Analysis

Overview

code-projects Simple Student Alumni System v1.0 contains a sql injection caused by unsanitized input in /TracerStudy/recordteacher_view.php?teacherID=, letting attackers execute arbitrary SQL queries remotely, exploit requires crafted request.

Severity & Score

Impact

Attackers can execute arbitrary SQL queries, potentially leading to data disclosure, modification, or full database compromise.

Mitigation

Update to the latest version or apply patches that sanitize input in /TracerStudy/recordteacher_view.php.

References

• https://github.com/Thirtypenny77/bug_report/blob/main/code-projects/simple-student-alumni-system/SQL-5.md

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner