CVE-2026-26700

s

ourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/edit_employee.php.

Configurations

Configuration 1 (hide)

cpe:2.3:a:jon-remus-sevellejo:personnel_property_equipment_system:1.0:*:*:*:*:*:*:*

History

03 Mar 2026, 19:43

Type Values Removed Values Added
First Time Jon-remus-sevellejo
Jon-remus-sevellejo personnel Property Equipment System
CPE cpe:2.3:a:jon-remus-sevellejo:personnel_property_equipment_system:1.0:*:*:*:*:*:*:*
CWE CWE-89
References () https://github.com/Thirtypenny77/bug_report/blob/main/sourcecodester/personel-property-equipment-system/SQL-1.md - () https://github.com/Thirtypenny77/bug_report/blob/main/sourcecodester/personel-property-equipment-system/SQL-1.md - Exploit, Third Party Advisory
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 9.8

02 Mar 2026, 17:16

Type Values Removed Values Added
New CVE

Information

Published : 2026-03-02 17:16

Updated : 2026-03-03 21:15


NVD link : CVE-2026-26700

Mitre link : CVE-2026-26700

CVE.ORG link : CVE-2026-26700


JSON object : View

CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')