CVE-2026-116061: SourceCodester Performance Indicator System edit_dealer.php sql injection
A vulnerability was identified in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/editdealer.php. The manipulation of the argument Contact leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The attack can be initiated remotely and requires no privileges or user interaction according to the supplied vector. Exploitation targets the Contact argument handled by /opils/staff/edit_dealer.php.
How likely is exploitation in practice?
A public exploit is available, and the vulnerability is rated as having low attack complexity. This increases the likelihood that exposed instances could be targeted.
What impact could successful exploitation have?
The supplied severity vector indicates low impacts to confidentiality, integrity, and availability. The issue is classified as SQL injection, so the affected application’s database interactions through the vulnerable parameter are implicated.