CVE-2026-7229 — Code-Projects Coaching Management System SQL Injection

title: SQL Injection in Coaching Management System reply.php — CVE-2026-7229
id: scw-2026-04-28-ai-1
status: experimental
level: critical
description: |
  Detects SQL injection attempts targeting the reply.php script in the Code-Projects Coaching Management System. The vulnerability specifically targets the 'complaintreply' parameter, and this rule looks for common SQL injection payloads within that parameter when accessed via the vulnerable URI and POST method.
author: SCW Feed Engine (AI-generated)
date: 2026-04-28
references:
  - https://shimiscyberworld.com/posts/nvd-CVE-2026-7229/
tags:
  - attack.initial_access
  - attack.t1190
logsource:
    category: webserver
detection:
  selection:
      cs-uri: 
          - '/cims/modules/admin/reply.php'
      cs-method: 
          - 'POST'
      cs-uri-query|contains:
          - 'complaintreply'
      cs-uri-query|contains:
          - "' OR 1=1 --" 
          - "' OR '1'='1" 
          - "' UNION SELECT"
      condition: selection
falsepositives:
  - Legitimate administrative activity

Source: Shimi's Cyber World · License & reuse