CVE-2026-3744Disclosure(carmelo / student_web_portal)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability has been found in code-projects Student Web Portal 1.0. This impacts the function valreg_passwdation of the file signup.php. The manipulation of the argument reg_passwd leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

carmelo CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

https://github.com/CH0ico/CVE_choco_2/blob/main/report.md

Vendor / third-party advisories

Other references

Weakness type (CWE)

CWE-74CWE-89

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

student_web_portal

Threat summary

6 mentions across 4 observed days
Momentum state: stable

What's happening

Technical details provided in 5 signals
Disclosure: 6 classified signals
Peaked 3d ago at 3 mentions (2026-03-08); latest day: 1
6 total mentions across 4 days

Affected systems

Vendors

carmelo

Products

student_web_portal

1 version affected across 1 product

Deep dive

Activity timeline6 mentions / 4d

Signal classification1 categories

Disclosure

6100.0%

Referenced assets5 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-08	3	Disclosure3
2026-03-09	1	Disclosure1
2026-03-12	1	Disclosure1
2026-03-13	1	Disclosure1

Full discourse6 posts

CRAC Learning - Tech@cracbot209d
Disclosure
CVE-2026-3744 (CVSS:6.9, HIGH) is Analyzed. A vulnerability has been found in code-projects Student Web Portal 1.0. This impacts the function valreg_passwdation of ..https://nvd.nist.gov/vuln/detail/CVE-2026-3744 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces CVE-2026-3744, highlighting its impact on the Student Web Portal 1.0 with a CVSS score of 6.9 and linking to the NVD entry, but provides no further exploit, patch, or PoC details.
0000022
172 followersView on X
CRAC Learning - Tech@cracbot210d
Disclosure
CVE-2026-3744 (CVSS:6.9, HIGH) is Analyzed. A vulnerability has been found in code-projects Student Web Portal 1.0. This impacts the function valreg_passwdation of ..https://nvd.nist.gov/vuln/detail/CVE-2026-3744 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
A high‑severity CVE-2026‑3744 affecting Student Web Portal 1.0 has been disclosed with CVSS details and an affected function identified; no PoC, exploit, or patch information is provided.
0000020
172 followersView on X
RedPacket Security@RedPacketSec213d
Disclosure
CVE Alert: CVE-2026-3744 - code-projects - Student Web Portal - https://www.redpacketsecurity.com/cve-alert-cve-2026-3744-code-projects-student-web-portal/ #OSINT #ThreatIntel #CyberSecurity #cve-2026-3744 #code-projects #student-web-portal
Post summary
The post announces CVE-2026-3744 for the code-projects Student Web Portal, but no additional details, PoC, or exploitation evidence are provided in the text.
0000097
3.5K followersView on X
CVE@CVEnew213d
Disclosure
CVE-2026-3744 A vulnerability has been found in code-projects Student Web Portal 1.0. This impacts the function valreg_passwdation of the file signup.php. The manipulation of the arg… https://www.cve.org/CVERecord?id=CVE-2026-3744
Post summary
A CVE-2026-3744 vulnerability affecting the code-projects Student Web Portal 1.0 is disclosed, impacting the valreg_passwdation function in signup.php.
00000152
56.6K followersView on X
CyberDudeBivash® | Global Cybersecurity Company@cyberbivash213d
Disclosure
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-3744 - code-projects Student Web Portal signup.php valreg_passwdation sql injection Intel Report: https://ift.tt/ZJ60b9W
Post summary
The message announces CVE-2026-3744 as an SQL injection flaw in the code-projects Student Web Portal’s signup.php, but provides no proof of concept, exploit, or patch details.
0000025
347 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds213d
Disclosure
CVE-2026-3744 SQL Injection in Code-Projects Student Web Portal 1.0 via Signup Functionality https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3744
Post summary
A new SQL injection vulnerability has been identified in Code-Projects Student Web Portal 1.0 via its signup function, with no known PoC, exploit, or mitigation details provided.
0000038
4.0K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	carmelo	student_web_portal	1.0	-	-

Explore more

Back to dashboard carmelo CVEs student_web_portal vulnerabilities

What researchers are saying

CVE-2026-3744

CRAC Learning - Tech@cracbotDisclosure

The post announces CVE-2026-3744, highlighting its impact on the Student Web Portal 1.0 with a CVSS score of 6.9 and linking to the NVD entry, but provides no further exploit, patch, or PoC details.

CRAC Learning - Tech@cracbotDisclosure

A high‑severity CVE-2026‑3744 affecting Student Web Portal 1.0 has been disclosed with CVSS details and an affected function identified; no PoC, exploit, or patch information is provided.

RedPacket Security@RedPacketSecDisclosure

The post announces CVE-2026-3744 for the code-projects Student Web Portal, but no additional details, PoC, or exploitation evidence are provided in the text.

CVE@CVEnewDisclosure

A CVE-2026-3744 vulnerability affecting the code-projects Student Web Portal 1.0 is disclosed, impacting the valreg_passwdation function in signup.php.

CyberDudeBivash® | Global Cybersecurity Company@cyberbivashDisclosure

The message announces CVE-2026-3744 as an SQL injection flaw in the code-projects Student Web Portal’s signup.php, but provides no proof of concept, exploit, or patch details.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

A new SQL injection vulnerability has been identified in Code-Projects Student Web Portal 1.0 via its signup function, with no known PoC, exploit, or mitigation details provided.