CVE-2026-125075: SourceCodester Smart Attendance System with QR Code Scanner Admin Account Creation create_admin.php getMessage missing authentication
A vulnerability has been found in SourceCodester Smart Attendance System with QR Code Scanner 1.0. This impacts the function getMessage of the file createadmin.php of the component Admin Account Creation. Such manipulation of the argument e leads to missing authentication. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What does an attacker need to exploit this issue?
The attack can be performed remotely and requires no privileges or user interaction. It involves manipulating the e argument handled by the getMessage function in create_admin.php.
Is public exploit information available?
Yes. A public exploit has been disclosed, so exploitation may be more likely.
Which deployments are known to be affected?
The affected product version identified is SourceCodester Smart Attendance System with QR Code Scanner 1.0. The issue is in the Admin Account Creation component.