Is there a public PoC exploit available for EUVD-2026-31700?

Yes, a public proof-of-concept exploit is available for EUVD-2026-31700. Prioritise patching immediately. EPSS: 0.0%.

StudentManagementSystem EUVD-2026-31700

Q: What is the CVSS score of EUVD-2026-31700?

EUVD-2026-31700 has a CVSS 4.0 base score of 5.5 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

| CVE-2026-9470 MEDIUM

SQL Injection (CWE-89)

2026-05-25 VulDB

GHSA-f85v-rrcm-xq6m

PHP SQLi Studentmanagementsystem

5.5

CVSS 4.0 · Vendor: VulDB

Severity by source

Vendor (VulDB) PRIMARY

5.5 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (VulDB) · only source for this CVE.

CVSS VectorVendor: VulDB

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Jun 08, 2026 - 11:45 vuln.today

Severity Changed

May 26, 2026 - 20:07 NVD

HIGH MEDIUM

CVSS changed

May 26, 2026 - 20:07 NVD

7.3 (HIGH) 5.5 (MEDIUM)

DescriptionCVE.org

A security vulnerability has been detected in yashpokharna2555 StudentManagementSystem cb2f558ddf8d19396de0f92abf2d224d46a0a203. This affects the function confirm_logged_in of the file student_trans.php. Such manipulation of the argument FIRST_NAME/Last_Name/EMAIL leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The project was informed of the problem early through an issue report but has not responded yet.

AnalysisAI

SQL injection in yashpokharna2555's StudentManagementSystem (commit cb2f558) exposes the confirm_logged_in function in student_trans.php to unauthenticated remote attackers who can manipulate FIRST_NAME, Last_Name, and EMAIL parameters to execute arbitrary SQL against the backend database. A public exploit has been disclosed via GitHub issue #3, confirming exploitability requires minimal skill; however, EPSS at 0.03% (9th percentile) indicates very low observed real-world exploitation activity, likely reflecting the narrow deployment footprint of this niche open-source PHP project rather than any technical barrier. No patch is available at time of analysis, as the maintainer has not responded to the coordinated disclosure.

Technical ContextAI

The affected product is a PHP-based student management application (CPE: cpe:2.3:a:yashpokharna2555:studentmanagementsystem:*:*:*:*:*:*:*:*) hosted on GitHub under a rolling release model. The root cause is CWE-89 (Improper Neutralization of Special Elements used in an SQL Command), which in PHP applications typically manifests as unsanitized user input being concatenated directly into SQL query strings rather than being handled via prepared statements or parameterized queries. The vulnerable function confirm_logged_in in student_trans.php processes FIRST_NAME, Last_Name, and EMAIL as user-controlled inputs, and the absence of proper escaping or parameterization allows SQL metacharacters in these fields to alter query logic. This class of vulnerability can expose full database read/write access depending on the SQL user's privileges.

RemediationAI

No vendor-released patch identified at time of analysis - the project maintainer was notified via a GitHub issue report (https://github.com/yashpokharna2555/StudentManagementSystem/issues/3) but has not yet responded. Operators running this application should immediately restrict external network access to student_trans.php, blocking or rate-limiting requests to any endpoint that accepts FIRST_NAME, Last_Name, or EMAIL parameters; this eliminates remote exploitation at the cost of disrupting legitimate remote access to that functionality. Deploying a Web Application Firewall with SQL injection detection rulesets (e.g., OWASP ModSecurity Core Rule Set) provides a compensating control that can intercept known SQLi payloads without taking the application offline, though WAF bypass techniques exist and this does not address the root cause. If the application is not serving an active production need, taking it offline entirely until a code-level fix is available is the most effective mitigation. Monitor the upstream repository at https://github.com/yashpokharna2555/StudentManagementSystem/ for any maintainer commits that address input parameterization in student_trans.php.