CVE-2026-90515

A vulnerability was determined in SourceCodester School Registration and Fee System 1.0. The impacted element is an unknown function of the file /bilal/normal/delete_stud.php. Executing a manipulation of the argument selector[] can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.

Score

CVSS 3.1 7.3 High

Status

Deferred - cna@vuldb.com

Published

2026-09-13

Last modified

2026-09-20

Weaknesses

CWE-74, CWE-89

Affected products

• School Registration And Fee System (Sourcecodester)

References

• https://github.com/zuojiu567/cve/issues/2
• https://vuldb.com/cve/CVE-2026-90515
• https://vuldb.com/submit/912054
• https://vuldb.com/vuln/403103
• https://vuldb.com/vuln/403103/cti
• https://www.sourcecodester.com/