CVE-2026-10225

A vulnerability was detected in raisulislamg4 student_management_system_by_php up to 310d950e09013d5133c6b9210aff9444382d16d1. This issue affects some unknown processing of the file login_check.php of the component Login. Performing a manipulation of the argument Username results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The project was informed of the problem early through an issue report but has not responded yet.

• CWE-74
• CWE-89

• https://github.com/raisulislamg4/student_management_system_by_php/
• https://github.com/raisulislamg4/student_management_system_by_php/issues/2
• https://vuldb.com/cve/CVE-2026-10225
• https://vuldb.com/submit/822784
• https://vuldb.com/vuln/367504
• https://vuldb.com/vuln/367504/cti

Published

Jun 1, 2026

Last Modified

Jul 22, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-102243A vulnerability was identified in MODSetter SurfSense up to …7.4
• CVE-2026-102244A security flaw has been discovered in MODSetter SurfSense u…4.3
• CVE-2026-102245A weakness has been identified in MODSetter SurfSense up to …7.3
• CVE-2026-102247A vulnerability was detected in FastAdmin 1.6.1.20250430/1.6…6.8
• CVE-2026-102248A vulnerability was identified in Rebuild up to 4.4.7/4.5.0-…7.3
• CVE-2026-102249A security flaw has been discovered in REBUILD up to 4.4.11.…7.3
• CVE-2026-102250CWE-345: Insufficient Verification of Data Authenticity vuln…8.6
• CVE-2026-102251The Abandoned Cart Pro for WooCommerce plugin for WordPress …7.5
• CVE-2026-102252A path traversal vulnerability (CWE-22) in the embedded VMDK…6.9
• CVE-2026-102253iperf3 versions prior to 3.22 contains a denial of service v…7.5
• CVE-2026-102255A Pre-authentication SSRF vulnerability exists in the SMA100…10
• CVE-2026-102256Post-authentication Improper Neutralization of Special Eleme…7.8