CVE-2026-124571: SourceCodester Simple CRUD using PHP and FPDF register.php sql injection
Published Nov 9, 2026
·Updated
A flaw has been found in SourceCodester Simple CRUD using PHP and FPDF 1.0. Affected by this vulnerability is an unknown functionality of the file app/register.php. Executing a manipulation of the argument firstname can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used.
Affected Software
1 affected component
Sourcecodester Simple CRUD using PHP and FPDF=1.0
Event History
Nov 9, 2026
CVE Published
via MITRE·05:45 AM
Data Sourced
via MITRE·05:45 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
The issue is remotely exploitable with low privileges required. No user interaction is required, and exploitation targets the firstname argument handled by app/register.php.
2
Is exploit code available?
Yes. A proof of concept has been published, so attackers may be able to use it.