Skip to content
Threat Feed
Subscribe

Product

School Management System

1 brief RSS
high threat

ProjectsAndPrograms School Management System SQL Injection Vulnerability

A SQL injection vulnerability (CVE-2026-6595) exists in the ProjectsAndPrograms School Management System affecting the buslocation.php file's HTTP GET parameter handler, allowing remote attackers to inject SQL commands via the 'bus_id' argument.

exploited School Management System sql-injection web-application school-management-system
2r 1t 1c