Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
4 vulnerabilities by Soarkey
CVE-2026-82621 (GCVE-0-2026-82621)
Vulnerability from nvd – Published: 2026-08-31 05:45 – Updated: 2026-08-31 05:45
VLAI
EPSS
VEX
Title
Soarkey StudentManagement/学生信息管理系统 Administrative Servlet AdminDao.java AdminDao.doGet authorization
Summary
A weakness has been identified in Soarkey StudentManagement and 学生信息管理系统 up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. This impacts the function AdminDao.doGet of the file code/src/service/AdminDao.java of the component Administrative Servlet. Executing a manipulation of the argument action can lead to authorization bypass. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Severity
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/397121 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/397121/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-82621 | third-party-advisory |
| https://vuldb.com/submit/893104 | third-party-advisory |
| https://github.com/Soarkey/StudentManagement/issues/32 | exploitissue-tracking |
| https://github.com/Soarkey/StudentManagement/ | product |
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Soarkey | StudentManagement |
Affected:
e08f7f1d5015af407aa4cca0ada3dea189b4937e
cpe:2.3:a:soarkey:studentmanagement:*:*:*:*:*:*:*:* |
|
| Soarkey | 学生信息管理系统 |
Affected:
e08f7f1d5015af407aa4cca0ada3dea189b4937e
cpe:2.3:a:soarkey:_:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:soarkey:studentmanagement:*:*:*:*:*:*:*:*"
],
"modules": [
"Administrative Servlet"
],
"product": "StudentManagement",
"vendor": "Soarkey",
"versions": [
{
"status": "affected",
"version": "e08f7f1d5015af407aa4cca0ada3dea189b4937e"
}
]
},
{
"cpes": [
"cpe:2.3:a:soarkey:_:*:*:*:*:*:*:*:*"
],
"modules": [
"Administrative Servlet"
],
"product": "\u5b66\u751f\u4fe1\u606f\u7ba1\u7406\u7cfb\u7edf",
"vendor": "Soarkey",
"versions": [
{
"status": "affected",
"version": "e08f7f1d5015af407aa4cca0ada3dea189b4937e"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "soulinda (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A weakness has been identified in Soarkey StudentManagement and \u5b66\u751f\u4fe1\u606f\u7ba1\u7406\u7cfb\u7edf up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. This impacts the function AdminDao.doGet of the file code/src/service/AdminDao.java of the component Administrative Servlet. Executing a manipulation of the argument action can lead to authorization bypass. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 7.5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-639",
"description": "Authorization Bypass",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-285",
"description": "Improper Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-31T05:45:09.136Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-397121 | Soarkey StudentManagement/\u5b66\u751f\u4fe1\u606f\u7ba1\u7406\u7cfb\u7edf Administrative Servlet AdminDao.java AdminDao.doGet authorization",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/397121"
},
{
"name": "VDB-397121 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/397121/cti"
},
{
"name": "CVE-2026-82621 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-82621"
},
{
"name": "Submit #893104 | Soarkey StudentManagement e08f7f1d5015af407aa4cca0ada3dea189b4937e Authorization Bypass",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/893104"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/Soarkey/StudentManagement/issues/32"
},
{
"tags": [
"product"
],
"url": "https://github.com/Soarkey/StudentManagement/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-08-30T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-08-30T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-08-30T10:05:20.000Z",
"value": "VulDB entry last update"
}
],
"title": "Soarkey StudentManagement/\u5b66\u751f\u4fe1\u606f\u7ba1\u7406\u7cfb\u7edf Administrative Servlet AdminDao.java AdminDao.doGet authorization",
"x_generator": [
"VulDB PVTS v202608"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-82621",
"datePublished": "2026-08-31T05:45:09.136Z",
"dateReserved": "2026-08-30T08:00:04.628Z",
"dateUpdated": "2026-08-31T05:45:09.136Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-82620 (GCVE-0-2026-82620)
Vulnerability from nvd – Published: 2026-08-31 05:30 – Updated: 2026-08-31 05:30
VLAI
EPSS
VEX
Title
Soarkey StudentManagement/学生信息管理系统 CourseDao.java CourseDao.course_ranking sql injection
Summary
A security flaw has been discovered in Soarkey StudentManagement and 学生信息管理系统 up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. This affects the function CourseDao.course_ranking of the file code/src/dao/CourseDao.java. Performing a manipulation of the argument cno results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Severity
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/397120 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/397120/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-82620 | third-party-advisory |
| https://vuldb.com/submit/893103 | third-party-advisory |
| https://github.com/Soarkey/StudentManagement/issues/33 | exploitissue-tracking |
| https://github.com/Soarkey/StudentManagement/ | product |
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Soarkey | StudentManagement |
Affected:
e08f7f1d5015af407aa4cca0ada3dea189b4937e
cpe:2.3:a:soarkey:studentmanagement:*:*:*:*:*:*:*:* |
|
| Soarkey | 学生信息管理系统 |
Affected:
e08f7f1d5015af407aa4cca0ada3dea189b4937e
cpe:2.3:a:soarkey:_:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:soarkey:studentmanagement:*:*:*:*:*:*:*:*"
],
"product": "StudentManagement",
"vendor": "Soarkey",
"versions": [
{
"status": "affected",
"version": "e08f7f1d5015af407aa4cca0ada3dea189b4937e"
}
]
},
{
"cpes": [
"cpe:2.3:a:soarkey:_:*:*:*:*:*:*:*:*"
],
"product": "\u5b66\u751f\u4fe1\u606f\u7ba1\u7406\u7cfb\u7edf",
"vendor": "Soarkey",
"versions": [
{
"status": "affected",
"version": "e08f7f1d5015af407aa4cca0ada3dea189b4937e"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "soulinda (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A security flaw has been discovered in Soarkey StudentManagement and \u5b66\u751f\u4fe1\u606f\u7ba1\u7406\u7cfb\u7edf up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. This affects the function CourseDao.course_ranking of the file code/src/dao/CourseDao.java. Performing a manipulation of the argument cno results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 6.5,
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "SQL Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-74",
"description": "Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-31T05:30:08.729Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-397120 | Soarkey StudentManagement/\u5b66\u751f\u4fe1\u606f\u7ba1\u7406\u7cfb\u7edf CourseDao.java CourseDao.course_ranking sql injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/397120"
},
{
"name": "VDB-397120 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/397120/cti"
},
{
"name": "CVE-2026-82620 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-82620"
},
{
"name": "Submit #893103 | Soarkey StudentManagement e08f7f1d5015af407aa4cca0ada3dea189b4937e SQL Injection",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/893103"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/Soarkey/StudentManagement/issues/33"
},
{
"tags": [
"product"
],
"url": "https://github.com/Soarkey/StudentManagement/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-08-30T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-08-30T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-08-30T10:05:12.000Z",
"value": "VulDB entry last update"
}
],
"title": "Soarkey StudentManagement/\u5b66\u751f\u4fe1\u606f\u7ba1\u7406\u7cfb\u7edf CourseDao.java CourseDao.course_ranking sql injection",
"x_generator": [
"VulDB PVTS v202608"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-82620",
"datePublished": "2026-08-31T05:30:08.729Z",
"dateReserved": "2026-08-30T07:59:59.719Z",
"dateUpdated": "2026-08-31T05:30:08.729Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-82621 (GCVE-0-2026-82621)
Vulnerability from cvelistv5 – Published: 2026-08-31 05:45 – Updated: 2026-08-31 05:45
VLAI
EPSS
VEX
Title
Soarkey StudentManagement/学生信息管理系统 Administrative Servlet AdminDao.java AdminDao.doGet authorization
Summary
A weakness has been identified in Soarkey StudentManagement and 学生信息管理系统 up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. This impacts the function AdminDao.doGet of the file code/src/service/AdminDao.java of the component Administrative Servlet. Executing a manipulation of the argument action can lead to authorization bypass. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Severity
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/397121 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/397121/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-82621 | third-party-advisory |
| https://vuldb.com/submit/893104 | third-party-advisory |
| https://github.com/Soarkey/StudentManagement/issues/32 | exploitissue-tracking |
| https://github.com/Soarkey/StudentManagement/ | product |
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Soarkey | StudentManagement |
Affected:
e08f7f1d5015af407aa4cca0ada3dea189b4937e
cpe:2.3:a:soarkey:studentmanagement:*:*:*:*:*:*:*:* |
|
| Soarkey | 学生信息管理系统 |
Affected:
e08f7f1d5015af407aa4cca0ada3dea189b4937e
cpe:2.3:a:soarkey:_:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:soarkey:studentmanagement:*:*:*:*:*:*:*:*"
],
"modules": [
"Administrative Servlet"
],
"product": "StudentManagement",
"vendor": "Soarkey",
"versions": [
{
"status": "affected",
"version": "e08f7f1d5015af407aa4cca0ada3dea189b4937e"
}
]
},
{
"cpes": [
"cpe:2.3:a:soarkey:_:*:*:*:*:*:*:*:*"
],
"modules": [
"Administrative Servlet"
],
"product": "\u5b66\u751f\u4fe1\u606f\u7ba1\u7406\u7cfb\u7edf",
"vendor": "Soarkey",
"versions": [
{
"status": "affected",
"version": "e08f7f1d5015af407aa4cca0ada3dea189b4937e"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "soulinda (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A weakness has been identified in Soarkey StudentManagement and \u5b66\u751f\u4fe1\u606f\u7ba1\u7406\u7cfb\u7edf up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. This impacts the function AdminDao.doGet of the file code/src/service/AdminDao.java of the component Administrative Servlet. Executing a manipulation of the argument action can lead to authorization bypass. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 7.5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-639",
"description": "Authorization Bypass",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-285",
"description": "Improper Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-31T05:45:09.136Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-397121 | Soarkey StudentManagement/\u5b66\u751f\u4fe1\u606f\u7ba1\u7406\u7cfb\u7edf Administrative Servlet AdminDao.java AdminDao.doGet authorization",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/397121"
},
{
"name": "VDB-397121 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/397121/cti"
},
{
"name": "CVE-2026-82621 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-82621"
},
{
"name": "Submit #893104 | Soarkey StudentManagement e08f7f1d5015af407aa4cca0ada3dea189b4937e Authorization Bypass",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/893104"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/Soarkey/StudentManagement/issues/32"
},
{
"tags": [
"product"
],
"url": "https://github.com/Soarkey/StudentManagement/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-08-30T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-08-30T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-08-30T10:05:20.000Z",
"value": "VulDB entry last update"
}
],
"title": "Soarkey StudentManagement/\u5b66\u751f\u4fe1\u606f\u7ba1\u7406\u7cfb\u7edf Administrative Servlet AdminDao.java AdminDao.doGet authorization",
"x_generator": [
"VulDB PVTS v202608"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-82621",
"datePublished": "2026-08-31T05:45:09.136Z",
"dateReserved": "2026-08-30T08:00:04.628Z",
"dateUpdated": "2026-08-31T05:45:09.136Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-82620 (GCVE-0-2026-82620)
Vulnerability from cvelistv5 – Published: 2026-08-31 05:30 – Updated: 2026-08-31 05:30
VLAI
EPSS
VEX
Title
Soarkey StudentManagement/学生信息管理系统 CourseDao.java CourseDao.course_ranking sql injection
Summary
A security flaw has been discovered in Soarkey StudentManagement and 学生信息管理系统 up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. This affects the function CourseDao.course_ranking of the file code/src/dao/CourseDao.java. Performing a manipulation of the argument cno results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Severity
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/397120 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/397120/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-82620 | third-party-advisory |
| https://vuldb.com/submit/893103 | third-party-advisory |
| https://github.com/Soarkey/StudentManagement/issues/33 | exploitissue-tracking |
| https://github.com/Soarkey/StudentManagement/ | product |
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Soarkey | StudentManagement |
Affected:
e08f7f1d5015af407aa4cca0ada3dea189b4937e
cpe:2.3:a:soarkey:studentmanagement:*:*:*:*:*:*:*:* |
|
| Soarkey | 学生信息管理系统 |
Affected:
e08f7f1d5015af407aa4cca0ada3dea189b4937e
cpe:2.3:a:soarkey:_:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:soarkey:studentmanagement:*:*:*:*:*:*:*:*"
],
"product": "StudentManagement",
"vendor": "Soarkey",
"versions": [
{
"status": "affected",
"version": "e08f7f1d5015af407aa4cca0ada3dea189b4937e"
}
]
},
{
"cpes": [
"cpe:2.3:a:soarkey:_:*:*:*:*:*:*:*:*"
],
"product": "\u5b66\u751f\u4fe1\u606f\u7ba1\u7406\u7cfb\u7edf",
"vendor": "Soarkey",
"versions": [
{
"status": "affected",
"version": "e08f7f1d5015af407aa4cca0ada3dea189b4937e"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "soulinda (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A security flaw has been discovered in Soarkey StudentManagement and \u5b66\u751f\u4fe1\u606f\u7ba1\u7406\u7cfb\u7edf up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. This affects the function CourseDao.course_ranking of the file code/src/dao/CourseDao.java. Performing a manipulation of the argument cno results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 6.5,
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "SQL Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-74",
"description": "Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-31T05:30:08.729Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-397120 | Soarkey StudentManagement/\u5b66\u751f\u4fe1\u606f\u7ba1\u7406\u7cfb\u7edf CourseDao.java CourseDao.course_ranking sql injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/397120"
},
{
"name": "VDB-397120 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/397120/cti"
},
{
"name": "CVE-2026-82620 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-82620"
},
{
"name": "Submit #893103 | Soarkey StudentManagement e08f7f1d5015af407aa4cca0ada3dea189b4937e SQL Injection",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/893103"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/Soarkey/StudentManagement/issues/33"
},
{
"tags": [
"product"
],
"url": "https://github.com/Soarkey/StudentManagement/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-08-30T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-08-30T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-08-30T10:05:12.000Z",
"value": "VulDB entry last update"
}
],
"title": "Soarkey StudentManagement/\u5b66\u751f\u4fe1\u606f\u7ba1\u7406\u7cfb\u7edf CourseDao.java CourseDao.course_ranking sql injection",
"x_generator": [
"VulDB PVTS v202608"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-82620",
"datePublished": "2026-08-31T05:30:08.729Z",
"dateReserved": "2026-08-30T07:59:59.719Z",
"dateUpdated": "2026-08-31T05:30:08.729Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}