CVE-2026-77020: CodeAstro Apartment Visitor Management System password-recovery.php sql injection
A vulnerability was identified in CodeAstro Apartment Visitor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file password-recovery.php. The manipulation of the argument email leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What does an attacker need to exploit this issue?
The issue is remotely exploitable through the email argument in password-recovery.php. No privileges or user interaction are required, and a public exploit is available.
Which deployments are known to be affected?
CodeAstro Apartment Visitor Management System version 1.0 is identified as affected. The available information does not state whether other versions or configurations are affected.
What is the likely impact of successful exploitation?
Successful SQL injection may affect the confidentiality, integrity, and availability of the application or its underlying data. The reported severity is high, with a score of 7.3.