Veille CVE

Recherche « Harsh21Patel Inventory-Management-System-PHP »

1 CVE

Critique 1 Élevée 0 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Harsh21Patel Inventory-Management-System-PHP » ✕
  1. CVE-2026-71248 9.8 Critique

    Harsh21Patel Inventory-Management-System-PHP

    Inventory-Management-System-PHP's login.php constructs its authentication query via direct string concatenation of raw POST parameters: = "select * from user where email = '' and password = ''", with no escaping or parameterization, allowing authentication bypass via a payload such as email=' OR 1=1 LIMIT 1-- -.