CVE-2026-6038: code-projects Vehicle Showroom Management System RegisterCustomerFunction.php sql injection
A vulnerability was identified in code-projects Vehicle Showroom Management System 1.0. This impacts an unknown function of the file /util/RegisterCustomerFunction.php. Such manipulation of the argument BRANCHID leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-6038?
CVE-2026-6038 has a medium severity rating of 5.5.
What kind of vulnerability is CVE-2026-6038?
CVE-2026-6038 is identified as an SQL Injection vulnerability.
How do I fix CVE-2026-6038?
To fix CVE-2026-6038, input validation and parameterized queries should be implemented to sanitize the BRANCH_ID argument.
Can CVE-2026-6038 be exploited remotely?
Yes, CVE-2026-6038 can be exploited remotely due to its nature as a SQL injection vulnerability.
What impact does CVE-2026-6038 have on the system?
CVE-2026-6038 can allow an attacker to manipulate SQL queries, potentially leading to data exposure or corruption.