CVE-2026-13550: medium-severity vulnerability in itsourcecode Baptism Information Management…
itsourcecode Baptism Information Management System delbaptism.php sql injection
Published
33Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 6.9epss 0.4%
exploitation probability
0.4%top 65% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
A weakness has been identified in itsourcecode Baptism Information Management System 1.0. The impacted element is an unknown function of the file /delbaptism.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Affected products
itsourcecode · Baptism Information Management Systempublic PoCs found — 1
cve_referencegithub.com/Hh-176/CVE/issues/1unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — itsourcecode Baptism Information Management…
In the same product, most dangerous first.
CVE-2026-13551MEDIUMitsourcecode Baptism Information Management System editBaptism.php sql injectionEPSS 0.4%CVE-2025-10404MEDIUMitsourcecode Baptism Information Management System rptbaptismal.php sql injectionEPSS 0.4%CVE-2025-10405MEDIUMitsourcecode Baptism Information Management System listbaptism.php sql injectionEPSS 0.4%CVE-2026-108927MEDIUMitsourcecode Baptism Information Management System pbaptism.php sql injectionEPSS —CVE-2026-108926MEDIUMitsourcecode Baptism Information Management System ebaptism.php sql injectionEPSS —