CVE-2026-108927: itsourcecode Baptism Information Management System pbaptism.php sql injection
A weakness has been identified in itsourcecode Baptism Information Management System 1.0. This vulnerability affects unknown code of the file pbaptism.php. This manipulation of the argument bid causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Deployments of itsourcecode Baptism Information Management System 1.0 are exposed if the pbaptism.php endpoint can be reached remotely and processes the b_id argument.
What does an attacker need to exploit it?
The published severity vector indicates that an attacker needs low-level privileges and does not require user interaction. The attack can be initiated remotely and public exploit material is available.
What is the potential impact of successful exploitation?
The severity vector rates confidentiality, integrity, and availability impact as low. The flaw is an SQL injection affecting the b_id argument in pbaptism.php.