CVE-2026-26701

sourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/edit_tecnical_user.php.
Configurations

Configuration 1 (hide)

cpe:2.3:a:jon-remus-sevellejo:personnel_property_equipment_system:1.0:*:*:*:*:*:*:*

History

03 Mar 2026, 18:19

Type Values Removed Values Added
CWE CWE-89
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 9.8
First Time Jon-remus-sevellejo personnel Property Equipment System
Jon-remus-sevellejo
CPE cpe:2.3:a:jon-remus-sevellejo:personnel_property_equipment_system:1.0:*:*:*:*:*:*:*
References () https://github.com/Thirtypenny77/bug_report/blob/main/sourcecodester/personel-property-equipment-system/SQL-2.md - () https://github.com/Thirtypenny77/bug_report/blob/main/sourcecodester/personel-property-equipment-system/SQL-2.md - Exploit, Third Party Advisory

02 Mar 2026, 16:16

Type Values Removed Values Added
New CVE

Information

Published : 2026-03-02 16:16

Updated : 2026-03-03 21:15


NVD link : CVE-2026-26701

Mitre link : CVE-2026-26701

CVE.ORG link : CVE-2026-26701


JSON object : View

Products Affected

jon-remus-sevellejo

  • personnel_property_equipment_system
CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')