SZB-32f2b4441c
EUVD-2026-114257: cak-filemanagement-system SQL injection reported in save_student.php
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- 37954679 (cak-filemanagement-system project)
- Product
- cak-filemanagement-system
- First seen
Summary
The EUVD listing (CVSS 6.9) says a vulnerability was found in cak-filemanagement-system up to commit 5e6433246475e66462e1fea980688de96a049297, affecting the mysqli_query call in admin/save_student.php. The listing is the only source cited, and no fixed version is named in the excerpt.
If you use 37954679 (cak-filemanagement-system project)
Check the project for a fixed commit or release and apply it
Restrict access to the admin/ directory
Review database logs for unusual queries
What the sources say 1
· Mastodon: “A vulnerability was found in 37954679 cak-filemanagement-system up to 5e6433246475e66462e1fea980688de96a049297.” Source