CVE-2026-14798: CodeAstro Apartment Visitor Management System visitor-entry.php sql injection
A vulnerability was identified in CodeAstro Apartment Visitor Management System 1.0. This issue affects some unknown processing of the file /apartment-visitor/visitor-entry.php. The manipulation of the argument visname leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-14798?
The severity of CVE-2026-14798 is rated medium with a score of 6.3.
How do I fix CVE-2026-14798?
To fix CVE-2026-14798, it is recommended to sanitize and validate user input in the visitor-entry.php file to prevent SQL injection.
What vulnerability type is CVE-2026-14798 classified as?
CVE-2026-14798 is classified as an SQL Injection vulnerability.
Can CVE-2026-14798 be exploited remotely?
Yes, CVE-2026-14798 can be exploited remotely by manipulating the visname argument.
Which component of the application is affected by CVE-2026-14798?
CVE-2026-14798 affects the visitor-entry.php file in the CodeAstro Apartment Visitor Management System.