CVE-2026-31158: SQL Injection

Published Oct 26, 2026

Updated

SQL Injection vulnerability in CRM SOFTTRADE Infotech (aka softtradeindia) 1.0 allows a remote attacker to execute arbitrary code via the Login Page

Affected Software

1 affected component

CRM SOFTTRADE Infotech CRM SOFTTRADE Infotech=1.0

Event History

Oct 26, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The issue is described as remotely exploitable through the login page. The available data does not indicate that prior authentication or local access is required.

Which deployments are known to be affected?

The affected product is identified as CRM SOFTTRADE Infotech, also referred to as softtradeindia, version 1.0. The supplied information does not state whether other versions or default installations are affected.

What impact is reported if exploitation succeeds?

Successful exploitation is reported to allow arbitrary code execution. The vulnerability is classified as SQL injection.

CVE-2026-31158: SQL Injection

Affected Software

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

Which deployments are known to be affected?

What impact is reported if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

Which deployments are known to be affected?

What impact is reported if exploitation succeeds?