Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
A flaw has been found in code-projects Student Admission System 1.0. Affected is an unknown function of the file /index.php. This manipulation of the argument eid/did causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-06-03 | 2 | Disclosure2 |
| 2026-07-25 | 1 | Exploit1 |
CVE-2026-10620 A flaw has been found in code-projects Student Admission System 1.0. Affected is an unknown function of the file /index.php. This manipulation of the argument eid/did… https://www.cve.org/CVERecord?id=CVE-2026-10620
Post summary
The text announces CVE-2026-10620, noting a flaw in the Student Admission System 1.0 where manipulating eid/did arguments in /index.php can exploit an unknown function.
🚨 HIGH: CVE-2026-10620 (CVSS 7.3) - SQL Injection in Student Admission System 1.0 via /index[.]php. Remotely exploitable, no auth required. Exploit publicly available. Patch immediately. #CVE #PatchNow #ThreatIntel https://t.co/ez64cwE7ZJ
Post summary
CVE-2026-10620 is a remotely exploitable SQL injection in Student Admission System 1.0; exploit code is publicly available, and an immediate patch is urged.
🚨*CVE* CVE-2026-10620 A flaw has been found in code-projects Student Admission System 1.0. Affected is an unknown function of the file /index.php. This manipulation of the argument eid/did… https://www.cve.org/CVERecord?id=CVE-2026-10620 ----- Traducción: Se encontró una fa… http://infoflow.cloud`
Post summary
The post announces CVE-2026-10620 in Student Admission System 1.0, noting a flaw involving argument manipulation in `/index.php`, but provides no exploit, patch, or evidence of active attacks.