The CVE-2026-18958 vulnerability is a SQL injection vulnerability in the loginCheckTest.php file of the Login component in the Student-Management-System. The vulnerability allows for remote attacks via the username and password arguments. The product does not use versioning, making it difficult to determine affected and unaffected releases. Administrators and users of the Student-Management-System should [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-08-05T17:16:46.240Z and has not been modified since then. The imranrisal-dev Student-Management-System has an unrestricted upload vulnerability in the storeProfileImage function of student_profile_pic.php. This vulnerability can be exploited remotely, allowing an attacker to upload malicious files. The [truncated]
