CVE-2026-18896 | lavkush-maurya Student-Registration-System 1.0 /student/changepass.php oldpass sql injection

A vulnerability was found in lavkush-maurya Student-Registration-System 1.0. It has been declared as critical. The affected element is an unknown function of the file /student/changepass.php. Executing a manipulation of the argument oldpass can lead to sql injection.

This vulnerability is registered as CVE-2026-18896. It is possible to launch the attack remotely. Furthermore, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More