CVE-2026-37749

Critical CVSS: 9.8

A SQL injection vulnerability in CodeAstro Simple Attendance Management System v1.0 allows remote unauthenticated attackers to bypass authentication via the username parameter in index.php.

Vendor

Product

CWE

CWE-89

Yayın Tarihi

2026-04-17 15:16:51

Güncelleme

2026-04-17 16:17:07

Source Identifier

cve@mitre.org

KEV Date Added

Kategoriler

CWE-89 CRITICAL 2026

Referanslar

https://codeastro.com/simple-attendance-management-system-in-php-with-source-code/ https://github.com/menevarad007/CVE-2026-37749