CVE-2026-5575: SourceCodester/jkev Record Management System Login index.php sql injection

Published Apr 5, 2026

Updated

A vulnerability was detected in SourceCodester/jkev Record Management System 1.0. Affected by this vulnerability is an unknown functionality of the file index.php of the component Login. The manipulation of the argument Username results in sql injection. The attack may be launched remotely. The exploit is now public and may be used.

Affected Software

1 affected component

Sourcecodester jkev Record Management System=1.0

Event History

Apr 5, 2026

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:16 PM

DescriptionSeverityWeakness

Feb 27, 58532

Event

via NVD·11:10 PM

Frequently Asked Questions

What is the severity of CVE-2026-5575?

CVE-2026-5575 has a critical severity level due to its potential for SQL injection.

How do I fix CVE-2026-5575?

To fix CVE-2026-5575, update the SourceCodester/jkev Record Management System to a version where the SQL injection vulnerability is patched.

Which systems are affected by CVE-2026-5575?

CVE-2026-5575 affects SourceCodester/jkev Record Management System version 1.0.

What is the nature of the vulnerability in CVE-2026-5575?

CVE-2026-5575 is an SQL injection vulnerability in the index.php file of the Login component.

Can CVE-2026-5575 expose sensitive user data?

Yes, CVE-2026-5575 can potentially expose sensitive user data through unsanitized database queries.