cnvd-2026-37880

cnvd

Description

School Registration and Fee System是SourceCodester社区的一款学校注册与费用管理软件。 School Registration and Fee System存在SQL注入漏洞，该漏洞源于对文件/bilal/save_class.php中参数Category的错误操作，攻击者可利用该漏洞获取数据库敏感信息。

Timeline

Published: unknown
Last Modified: unknown

CVSS Details

CVSS details not available.

Affected Products

No product information available.

References

No references available.

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2026-90526",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2026-90526"
    }
  },
  "description": "School Registration and Fee System是SourceCodester社区的一款学校注册与费用管理软件。\n\nSchool Registration and Fee System存在SQL注入漏洞，该漏洞源于对文件/bilal/save_class.php中参数Category的错误操作，攻击者可利用该漏洞获取数据库敏感信息。",
  "formalWay": "目前厂商尚未发布升级程序修复该安全问题，详情见厂商官网：\r\nhttps://www.sourcecodester.com/",
  "isEvent": "通用软硬件漏洞",
  "number": "CNVD-2026-37880",
  "openTime": "2026-09-20",
  "products": {
    "product": [
      "School Registration and Fee System School Registration and Fee System v1.0",
      "School Registration and Fee System School Registration and Fee System 1"
    ]
  },
  "referenceLink": "https://vuldb.com/vuln/403116",
  "serverity": "高",
  "submitTime": "2026-09-15",
  "title": "School Registration and Fee System SQL注入漏洞"
}

View JSON API Download JSON

cnvd-2026-37880

Raw JSON Data