CVE-2026-26703

s

ourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/advance_search.php.

Configurations

Configuration 1 (hide)

cpe:2.3:a:jon-remus-sevellejo:personnel_property_equipment_system:1.0:*:*:*:*:*:*:*

History

03 Mar 2026, 18:42

Type Values Removed Values Added
First Time Jon-remus-sevellejo
Jon-remus-sevellejo personnel Property Equipment System
CWE CWE-89
CPE cpe:2.3:a:jon-remus-sevellejo:personnel_property_equipment_system:1.0:*:*:*:*:*:*:*
References () https://github.com/Thirtypenny77/bug_report/blob/main/sourcecodester/personel-property-equipment-system/SQL-4.md - () https://github.com/Thirtypenny77/bug_report/blob/main/sourcecodester/personel-property-equipment-system/SQL-4.md - Exploit, Third Party Advisory
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 9.8

02 Mar 2026, 15:16

Type Values Removed Values Added
New CVE

Information

Published : 2026-03-02 15:16

Updated : 2026-03-03 21:15


NVD link : CVE-2026-26703

Mitre link : CVE-2026-26703

CVE.ORG link : CVE-2026-26703


JSON object : View

CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')