CVE-2026-90876: SourceCodester Online Faculty Clearance System delete_requirement.php sql injection
A vulnerability has been found in SourceCodester Online Faculty Clearance System 1.0. Affected by this vulnerability is an unknown functionality of the file /deleterequirement.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The attack can be initiated remotely and does not require privileges or user interaction according to the provided vector. Exploitation involves manipulating the ID argument handled by /delete_requirement.php.
Which deployments are known to be affected?
SourceCodester Online Faculty Clearance System version 1.0 is identified as affected. The available information does not state whether other versions or configurations are affected.
Is public exploit information available?
Yes. The exploit has been publicly disclosed and may be used, increasing the likelihood of opportunistic exploitation.
What is the potential impact of successful exploitation?
The severity vector indicates low impact to confidentiality, integrity, and availability. The specific database actions or data exposed through the injection are not provided.