CVE-2026-2087: SourceCodester Online Class Record System login.php sql injection
A flaw has been found in SourceCodester Online Class Record System 1.0. Affected by this issue is some unknown functionality of the file /admin/login.php. This manipulation of the argument useremail causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2087?
CVE-2026-2087 has a high severity rating due to its potential for SQL injection vulnerabilities that can compromise the database.
How do I fix CVE-2026-2087?
To fix CVE-2026-2087, sanitize and parameterize all SQL queries in the /admin/login.php file to prevent SQL injection.
What type of vulnerability is CVE-2026-2087?
CVE-2026-2087 is a SQL injection vulnerability that affects the login functionality of SourceCodester Online Class Record System.
Which version of SourceCodester is affected by CVE-2026-2087?
CVE-2026-2087 affects SourceCodester Online Class Record System version 1.0.
Can CVE-2026-2087 lead to unauthorized access?
Yes, CVE-2026-2087 can lead to unauthorized access to the application's database due to improper input validation.