CVE-2026-13551: itsourcecode Baptism Information Management System editBaptism.php sql injection

Published Jun 29, 2026

Updated

A security vulnerability has been detected in itsourcecode Baptism Information Management System 1.0. This affects an unknown function of the file /editBaptism.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.

Affected Software

1 affected component

itsourcecode Baptism Information Management System=1.0

Event History

Jun 29, 2026

CVE Published

via MITRE·08:30 AM

Data Sourced

via MITRE·08:30 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·09:16 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2026-13551?

CVE-2026-13551 has a severity rating of high, with a score of 7.3.

How do I fix CVE-2026-13551?

To fix CVE-2026-13551, update to the latest version of the itsourcecode Baptism Information Management System that patches this SQL injection vulnerability.

What type of attack does CVE-2026-13551 enable?

CVE-2026-13551 enables SQL injection attacks via manipulation of the argument ID in the editBaptism.php file.

Who is affected by CVE-2026-13551?

CVE-2026-13551 affects users of the itsourcecode Baptism Information Management System version 1.0.

Can CVE-2026-13551 be exploited remotely?

Yes, CVE-2026-13551 can be exploited remotely, allowing attackers to manipulate the system from outside.