CVE-2026-6036: code-projects Vehicle Showroom Management System VehicleDetailsFunction.php sql injection
A vulnerability was found in code-projects Vehicle Showroom Management System 1.0. The impacted element is an unknown function of the file /util/VehicleDetailsFunction.php. The manipulation of the argument VEHICLEID results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-6036?
CVE-2026-6036 has a high severity due to the possibility of SQL injection, which can compromise sensitive data.
How do I fix CVE-2026-6036?
To fix CVE-2026-6036, sanitize all user inputs where the VehicleDetailsFunction.php file processes SQL queries.
What are the potential consequences of exploiting CVE-2026-6036?
Exploiting CVE-2026-6036 could allow attackers to retrieve, modify, or delete sensitive information from the database.
Which versions of the Vehicle Showroom Management System are affected by CVE-2026-6036?
CVE-2026-6036 affects version 1.0 of the Vehicle Showroom Management System.
How can I determine if my system is vulnerable to CVE-2026-6036?
You can determine vulnerability to CVE-2026-6036 by checking if your website uses the affected version of the Vehicle Showroom Management System and reviewing input validation on SQL queries.