CVE-2026-3745

Published March 8th, 2026

View on NVD ↗

CVSS v3

6.3

MEDIUM

CVSS v2

6.5

MEDIUM

Affected

PROJECT

Description

A vulnerability was found in code-projects Student Web Portal 1.0. Affected is an unknown function of the file profile.php. The manipulation of the argument User results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used.

CH0ico/CVE_choco_4

Code-projects STUDENT WEB PORTAL V1.0 profile.php SQL injection

GitHub