CVE-2026-14766: CodeAstro Apartment Visitor Management System POST Parameter search-result.php sql injection
A vulnerability was identified in CodeAstro Apartment Visitor Management System 1.0. Affected by this issue is some unknown functionality of the file /apartment-visitor/search-result.php of the component POST Parameter Handler. The manipulation of the argument searchdata leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-14766?
The severity of CVE-2026-14766 is medium, rated at 6.3 on the CVSS scale.
What type of vulnerability is CVE-2026-14766?
CVE-2026-14766 is classified as a SQL Injection vulnerability.
How do I fix CVE-2026-14766?
To fix CVE-2026-14766, ensure that input data is properly sanitized and parameterized queries are used to prevent SQL injection.
What component is affected by CVE-2026-14766?
CVE-2026-14766 affects the POST Parameter Handler functionality in the /apartment-visitor/search-result.php file.
Is CVE-2026-14766 exploitable remotely?
Yes, CVE-2026-14766 is remotely exploitable, allowing attackers to manipulate the searchdata parameter.