University of Guelma Seminar System Database Compromised

Overview

On 17 May 2026, a DarkForums user claimed to have exploited a vulnerability in the seminar management application hosted at apps.univ-guelma.dz, part of the University of Guelma in Algeria. The post describes unauthorized access to the application's database containing user information.

What was published

The poster states that the seminar application was vulnerable to SQL injection, allowing authentication bypass and direct access to the backend database. The claimed impact includes:

• User credentials and personal information
• Seminar registration details
• Compromised integrity of the seminar management system

No download link or data sample was included in the post at the time of capture.

Risks for affected individuals

• Exposed credentials could enable account takeover if reused elsewhere.
• Seminar registration details may include names, emails and academic information.
• A foothold in university infrastructure could allow wider lateral movement.

What remains unknown

• Whether the claimed access was demonstrated with actual data.
• The number of affected user accounts.
• Whether the university has patched the vulnerability or acknowledged the incident.

What affected people should do

Users of the University of Guelma seminar platform should change their passwords, avoid password reuse, and watch for phishing messages referencing university systems.