CVE-2026-95819 Details
Description
A vulnerability has been found in anirbandutta9 College-Notes-Gallery up to 8c1cf3d98f30982d069c88ca172612c001eb39f6. Affected by this vulnerability is an unknown functionality of the file login.php. Such manipulation of the argument user/pass leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The vendor was contacted early about this disclosure but did not respond in any way.
A SQL injection vulnerability has been identified in the College-Notes-Gallery project by anirbandutta9, specifically in the login.php file. This vulnerability arises from inadequate input validation of the 'user' and 'pass' parameters, allowing remote attackers to inject malicious SQL queries. Exploitation of this vulnerability could lead to unauthorized access to the database, bypassing authentication, and manipulation or deletion of data. The vulnerability has been publicly disclosed and is actively exploitable.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Sep 22, 2026CISA-ADP
Assessed Sep 23, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/yingxiujie/cve/issues/9 | [email protected] | ExploitIssue TrackingTechnical Description |
| https://vuldb.com/cve/CVE-2026-95819 | [email protected] | AdvisoryPermission Required |
| https://vuldb.com/submit/897167 | [email protected] | Issue TrackingPermission Required |
| https://vuldb.com/vuln/408519 | [email protected] | BundlePermission Required |
| https://vuldb.com/vuln/408519/cti | [email protected] | Content Wall |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-74 | Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') | [email protected] |
| CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| anirbandutta9 College-Notes-Gallery | <= 8c1cf3d98f30982d069c88ca172612c001eb39f6 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Sep 23, 2026 | CVE Modified | CISA-ADP |
| Sep 22, 2026 | New CVE Received | [email protected] |