CVE-2026-78143: code-projects Barangay Resident Profiling Management System Resident Search Functionality residents.php sql injection
A vulnerability was determined in code-projects Barangay Resident Profiling Management System 1.0. Affected is an unknown function of the file residents.php of the component Resident Search Functionality. This manipulation of the argument Search causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
Remote attackers can exploit it over the network without authentication or user interaction, provided they can reach the Resident Search Functionality in residents.php.
What input is affected?
The vulnerable input is the Search argument handled by residents.php. Manipulating that argument can trigger SQL injection.
How urgent is remediation?
The issue is rated high with a 7.3 severity score, and public exploit information is available. Prioritize systems where the resident search page is remotely reachable.
Is a fixed version available?
The provided information identifies version 1.0 as affected but does not provide a fixed version or patch.