CVE-2026-19021: SourceCodester Computer Repair Shop Management System Master.php delete_product sql injection
A security vulnerability has been detected in SourceCodester Computer Repair Shop Management System 1.0. Affected by this issue is some unknown functionality of the file /classes/Master.php?f=deleteproduct. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-19021?
CVE-2026-19021 has a severity rating of 7.3, categorizing it as high risk.
How do I fix CVE-2026-19021?
To fix CVE-2026-19021, apply input validation and parameterized queries to prevent SQL injection in the delete_product functionality.
What is the impact of CVE-2026-19021?
CVE-2026-19021 allows attackers to execute arbitrary SQL queries by manipulating the ID argument in Master.php, leading to potential data exposure.
Which systems are affected by CVE-2026-19021?
CVE-2026-19021 affects SourceCodester Computer Repair Shop Management System version 1.0.
What type of vulnerability is CVE-2026-19021?
CVE-2026-19021 is classified as an SQL Injection vulnerability.