Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
4 vulnerabilities by Mstfakts
CVE-2026-86215 (GCVE-0-2026-86215)
Vulnerability from nvd – Published: 2026-09-06 13:15 – Updated: 2026-09-06 13:15
VLAI
EPSS
VEX
Title
Mstfakts College-Management-System Logout server.php session expiration
Summary
A vulnerability was identified in Mstfakts College-Management-System. The affected element is an unknown function of the file Front-end/server.php of the component Logout Handler. Such manipulation of the argument log_out leads to session expiration. It is possible to launch the attack remotely. The exploit is publicly available and might be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The project was informed of the problem early through an issue report but has not responded yet.
Severity
CWE
- CWE-613 - Session Expiration
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/399351 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/399351/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-86215 | third-party-advisory |
| https://vuldb.com/submit/897264 | third-party-advisory |
| https://github.com/Mstfakts/College-Management-Sy… | exploitissue-tracking |
| https://github.com/Mstfakts/College-Management-System/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Mstfakts | College-Management-System |
Affected:
82ab01d057d96c8893c419cd9cb6870120faaea3
Affected: a37300648b6e50d43a2f10392ad741d199635daf Affected: c81bbedea4d9e0b860ac368aa1dbb10e55ceddce cpe:2.3:a:mstfakts:college-management-system:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:mstfakts:college-management-system:*:*:*:*:*:*:*:*"
],
"modules": [
"Logout Handler"
],
"product": "College-Management-System",
"vendor": "Mstfakts",
"versions": [
{
"status": "affected",
"version": "82ab01d057d96c8893c419cd9cb6870120faaea3"
},
{
"status": "affected",
"version": "a37300648b6e50d43a2f10392ad741d199635daf"
},
{
"status": "affected",
"version": "c81bbedea4d9e0b860ac368aa1dbb10e55ceddce"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "wemen99 (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was identified in Mstfakts College-Management-System. The affected element is an unknown function of the file Front-end/server.php of the component Logout Handler. Such manipulation of the argument log_out leads to session expiration. It is possible to launch the attack remotely. The exploit is publicly available and might be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 4,
"vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-613",
"description": "Session Expiration",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-06T13:15:07.840Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-399351 | Mstfakts College-Management-System Logout server.php session expiration",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/399351"
},
{
"name": "VDB-399351 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/399351/cti"
},
{
"name": "CVE-2026-86215 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-86215"
},
{
"name": "Submit #897264 | Mstfakts College-Management-System 82ab01d057d96c8893c419cd9cb6870120faaea3 Session Expiration",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/897264"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/Mstfakts/College-Management-System/issues/7"
},
{
"tags": [
"product"
],
"url": "https://github.com/Mstfakts/College-Management-System/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-09-05T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-09-05T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-09-05T21:07:16.000Z",
"value": "VulDB entry last update"
}
],
"title": "Mstfakts College-Management-System Logout server.php session expiration",
"x_generator": [
"VulDB PVTS v202609"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-86215",
"datePublished": "2026-09-06T13:15:07.840Z",
"dateReserved": "2026-09-05T19:02:11.364Z",
"dateUpdated": "2026-09-06T13:15:07.840Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-86213 (GCVE-0-2026-86213)
Vulnerability from nvd – Published: 2026-09-06 12:45 – Updated: 2026-09-06 12:45
VLAI
EPSS
VEX
Title
Mstfakts College-Management-System Search university.php mysqli_query sql injection
Summary
A vulnerability was found in Mstfakts College-Management-System. This issue affects the function mysqli_query of the file Front-end/university.php of the component Search Handler. The manipulation of the argument book_name/book_author results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The project was informed of the problem early through an issue report but has not responded yet.
Severity
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/399349 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/399349/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-86213 | third-party-advisory |
| https://vuldb.com/submit/897249 | third-party-advisory |
| https://github.com/Mstfakts/College-Management-Sy… | exploitissue-tracking |
| https://github.com/Mstfakts/College-Management-System/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Mstfakts | College-Management-System |
Affected:
82ab01d057d96c8893c419cd9cb6870120faaea3
Affected: a37300648b6e50d43a2f10392ad741d199635daf Affected: c81bbedea4d9e0b860ac368aa1dbb10e55ceddce cpe:2.3:a:mstfakts:college-management-system:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:mstfakts:college-management-system:*:*:*:*:*:*:*:*"
],
"modules": [
"Search Handler"
],
"product": "College-Management-System",
"vendor": "Mstfakts",
"versions": [
{
"status": "affected",
"version": "82ab01d057d96c8893c419cd9cb6870120faaea3"
},
{
"status": "affected",
"version": "a37300648b6e50d43a2f10392ad741d199635daf"
},
{
"status": "affected",
"version": "c81bbedea4d9e0b860ac368aa1dbb10e55ceddce"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "Yangqiangfeng (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was found in Mstfakts College-Management-System. This issue affects the function mysqli_query of the file Front-end/university.php of the component Search Handler. The manipulation of the argument book_name/book_author results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 7.5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "SQL Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-74",
"description": "Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-06T12:45:09.402Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-399349 | Mstfakts College-Management-System Search university.php mysqli_query sql injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/399349"
},
{
"name": "VDB-399349 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/399349/cti"
},
{
"name": "CVE-2026-86213 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-86213"
},
{
"name": "Submit #897249 | Mstfakts College-Management-System 82ab01d057d96c8893c419cd9cb6870120faaea3 SQL Injection",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/897249"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/Mstfakts/College-Management-System/issues/5"
},
{
"tags": [
"product"
],
"url": "https://github.com/Mstfakts/College-Management-System/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-09-05T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-09-05T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-09-05T21:04:18.000Z",
"value": "VulDB entry last update"
}
],
"title": "Mstfakts College-Management-System Search university.php mysqli_query sql injection",
"x_generator": [
"VulDB PVTS v202609"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-86213",
"datePublished": "2026-09-06T12:45:09.402Z",
"dateReserved": "2026-09-05T18:59:08.596Z",
"dateUpdated": "2026-09-06T12:45:09.402Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-86215 (GCVE-0-2026-86215)
Vulnerability from cvelistv5 – Published: 2026-09-06 13:15 – Updated: 2026-09-06 13:15
VLAI
EPSS
VEX
Title
Mstfakts College-Management-System Logout server.php session expiration
Summary
A vulnerability was identified in Mstfakts College-Management-System. The affected element is an unknown function of the file Front-end/server.php of the component Logout Handler. Such manipulation of the argument log_out leads to session expiration. It is possible to launch the attack remotely. The exploit is publicly available and might be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The project was informed of the problem early through an issue report but has not responded yet.
Severity
CWE
- CWE-613 - Session Expiration
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/399351 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/399351/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-86215 | third-party-advisory |
| https://vuldb.com/submit/897264 | third-party-advisory |
| https://github.com/Mstfakts/College-Management-Sy… | exploitissue-tracking |
| https://github.com/Mstfakts/College-Management-System/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Mstfakts | College-Management-System |
Affected:
82ab01d057d96c8893c419cd9cb6870120faaea3
Affected: a37300648b6e50d43a2f10392ad741d199635daf Affected: c81bbedea4d9e0b860ac368aa1dbb10e55ceddce cpe:2.3:a:mstfakts:college-management-system:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:mstfakts:college-management-system:*:*:*:*:*:*:*:*"
],
"modules": [
"Logout Handler"
],
"product": "College-Management-System",
"vendor": "Mstfakts",
"versions": [
{
"status": "affected",
"version": "82ab01d057d96c8893c419cd9cb6870120faaea3"
},
{
"status": "affected",
"version": "a37300648b6e50d43a2f10392ad741d199635daf"
},
{
"status": "affected",
"version": "c81bbedea4d9e0b860ac368aa1dbb10e55ceddce"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "wemen99 (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was identified in Mstfakts College-Management-System. The affected element is an unknown function of the file Front-end/server.php of the component Logout Handler. Such manipulation of the argument log_out leads to session expiration. It is possible to launch the attack remotely. The exploit is publicly available and might be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 4,
"vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-613",
"description": "Session Expiration",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-06T13:15:07.840Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-399351 | Mstfakts College-Management-System Logout server.php session expiration",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/399351"
},
{
"name": "VDB-399351 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/399351/cti"
},
{
"name": "CVE-2026-86215 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-86215"
},
{
"name": "Submit #897264 | Mstfakts College-Management-System 82ab01d057d96c8893c419cd9cb6870120faaea3 Session Expiration",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/897264"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/Mstfakts/College-Management-System/issues/7"
},
{
"tags": [
"product"
],
"url": "https://github.com/Mstfakts/College-Management-System/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-09-05T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-09-05T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-09-05T21:07:16.000Z",
"value": "VulDB entry last update"
}
],
"title": "Mstfakts College-Management-System Logout server.php session expiration",
"x_generator": [
"VulDB PVTS v202609"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-86215",
"datePublished": "2026-09-06T13:15:07.840Z",
"dateReserved": "2026-09-05T19:02:11.364Z",
"dateUpdated": "2026-09-06T13:15:07.840Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-86213 (GCVE-0-2026-86213)
Vulnerability from cvelistv5 – Published: 2026-09-06 12:45 – Updated: 2026-09-06 12:45
VLAI
EPSS
VEX
Title
Mstfakts College-Management-System Search university.php mysqli_query sql injection
Summary
A vulnerability was found in Mstfakts College-Management-System. This issue affects the function mysqli_query of the file Front-end/university.php of the component Search Handler. The manipulation of the argument book_name/book_author results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The project was informed of the problem early through an issue report but has not responded yet.
Severity
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/399349 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/399349/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-86213 | third-party-advisory |
| https://vuldb.com/submit/897249 | third-party-advisory |
| https://github.com/Mstfakts/College-Management-Sy… | exploitissue-tracking |
| https://github.com/Mstfakts/College-Management-System/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Mstfakts | College-Management-System |
Affected:
82ab01d057d96c8893c419cd9cb6870120faaea3
Affected: a37300648b6e50d43a2f10392ad741d199635daf Affected: c81bbedea4d9e0b860ac368aa1dbb10e55ceddce cpe:2.3:a:mstfakts:college-management-system:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:mstfakts:college-management-system:*:*:*:*:*:*:*:*"
],
"modules": [
"Search Handler"
],
"product": "College-Management-System",
"vendor": "Mstfakts",
"versions": [
{
"status": "affected",
"version": "82ab01d057d96c8893c419cd9cb6870120faaea3"
},
{
"status": "affected",
"version": "a37300648b6e50d43a2f10392ad741d199635daf"
},
{
"status": "affected",
"version": "c81bbedea4d9e0b860ac368aa1dbb10e55ceddce"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "Yangqiangfeng (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was found in Mstfakts College-Management-System. This issue affects the function mysqli_query of the file Front-end/university.php of the component Search Handler. The manipulation of the argument book_name/book_author results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 7.5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "SQL Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-74",
"description": "Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-06T12:45:09.402Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-399349 | Mstfakts College-Management-System Search university.php mysqli_query sql injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/399349"
},
{
"name": "VDB-399349 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/399349/cti"
},
{
"name": "CVE-2026-86213 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-86213"
},
{
"name": "Submit #897249 | Mstfakts College-Management-System 82ab01d057d96c8893c419cd9cb6870120faaea3 SQL Injection",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/897249"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/Mstfakts/College-Management-System/issues/5"
},
{
"tags": [
"product"
],
"url": "https://github.com/Mstfakts/College-Management-System/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-09-05T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-09-05T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-09-05T21:04:18.000Z",
"value": "VulDB entry last update"
}
],
"title": "Mstfakts College-Management-System Search university.php mysqli_query sql injection",
"x_generator": [
"VulDB PVTS v202609"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-86213",
"datePublished": "2026-09-06T12:45:09.402Z",
"dateReserved": "2026-09-05T18:59:08.596Z",
"dateUpdated": "2026-09-06T12:45:09.402Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}