Findings

CVE-2026-3745

A vulnerability was found in code-projects Student Web Portal 1.0.

Published Mar 8, 2026 · updated Jun 17, 2026 · carmelo student web portal

A vulnerability was found in code-projects Student Web Portal 1.0. Affected is an unknown function of the file profile.php. The manipulation of the argument User results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 8, 2026 · NIST NVD

    Detected

    A vulnerability was found in code-projects Student Web Portal 1.0. Affected is an unknown function of the file profile.php. The manipulation of the argument User results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used.

  2. Jun 17, 2026 · NIST NVD

    Updated

    A vulnerability was found in code-projects Student Web Portal 1.0. Affected is an unknown function of the file profile.php. The manipulation of the argument User results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used.

Affected

  • cpe carmelo/student web portal1.0

Sources

  • CVE.orgVulnerability recordCVE-2026-3745

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-3745

    A vulnerability was found in code-projects Student Web Portal 1.0. Affected is an unknown function of the file profile.php. The manipulation of the argument User results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used.

    nvd.nist.gov

References

CVE-2026-3745 · ZeroDay Findings