Findings

CVE-2026-3744

A vulnerability has been found in code-projects Student Web Portal 1.0.

Published Mar 8, 2026 · updated Jun 17, 2026 · carmelo student web portal

A vulnerability has been found in code-projects Student Web Portal 1.0. This impacts the function valreg_passwdation of the file signup.php. The manipulation of the argument reg_passwd leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 8, 2026 · NIST NVD

    Detected

    A vulnerability has been found in code-projects Student Web Portal 1.0. This impacts the function valreg_passwdation of the file signup.php. The manipulation of the argument reg_passwd leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

  2. Jun 17, 2026 · NIST NVD

    Updated

    A vulnerability has been found in code-projects Student Web Portal 1.0. This impacts the function valreg_passwdation of the file signup.php. The manipulation of the argument reg_passwd leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected

  • cpe carmelo/student web portal1.0

Sources

  • CVE.orgVulnerability recordCVE-2026-3744

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-3744

    A vulnerability has been found in code-projects Student Web Portal 1.0. This impacts the function valreg_passwdation of the file signup.php. The manipulation of the argument reg_passwd leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to

    nvd.nist.gov

References