Veille CVE

Mardi 6 octobre 2026

3 CVE

  1. CVE-2026-105809 4.3 Moyenne

    SourceCodester Simple Student Information System

    A vulnerability was identified in SourceCodester Simple Student Information System 1.0. This issue affects some unknown processing of the file /register.php of the component Profile Field Handler. The manipulation of the argument firstname/lastname leads to cross site scripting. The attack may be initiated remotely. The exploit is publicly available and might be used.

  2. CVE-2026-105808 3.5 Faible

    SourceCodester Simple Student Information System

    A vulnerability was determined in SourceCodester Simple Student Information System 1.0. This vulnerability affects the function clean of the file searchresults.php. Executing a manipulation of the argument searchbox can lead to cross site scripting. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.

  3. CVE-2026-105807 7.3 Élevée

    SourceCodester Simple Student Information System

    A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the file searchquery.php. Performing a manipulation results in sql injection. The attack can be initiated remotely.