CVE-2026-108926: fallo de gravedad media en itsourcecode Baptism Information Management…
itsourcecode Baptism Information Management System ebaptism.php sql injection
Publicada el
30Vexday Risk Score
Sin señal de explotación. Ella tiene prueba de concepto pública.
ssvc Attendcvss 5.3
probabilidad de explotación
—
explotación observada
noninguna fuente lo reporta
1 exploit(s) público(s)
A security flaw has been discovered in itsourcecode Baptism Information Management System 1.0. This affects an unknown part of the file ebaptism.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Productos afectados
itsourcecode · Baptism Information Management SystemPoCs públicas encontradas — 1
cve_referencegithub.com/yulisec/submit/issues/1no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
CVEs relacionadas — itsourcecode Baptism Information Management…
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-13551MEDIUMitsourcecode Baptism Information Management System editBaptism.php sql injectionEPSS 0.4%CVE-2026-13550MEDIUMitsourcecode Baptism Information Management System delbaptism.php sql injectionEPSS 0.4%CVE-2025-10404MEDIUMitsourcecode Baptism Information Management System rptbaptismal.php sql injectionEPSS 0.4%CVE-2025-10405MEDIUMitsourcecode Baptism Information Management System listbaptism.php sql injectionEPSS 0.4%CVE-2026-108927MEDIUMitsourcecode Baptism Information Management System pbaptism.php sql injectionEPSS —