CVE-2026-116062: fallo de gravedad media en SourceCodester Performance Indicator System
SourceCodester Performance Indicator System save_profile.php sql injection
Publicada el
10Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 6.9
probabilidad de explotación
—
explotación observada
noninguna fuente lo reporta
A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. This issue affects some unknown processing of the file /opils/staff/save_profile.php. The manipulation of the argument Contact results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Productos afectados
SourceCodester · Performance Indicator SystemCVEs relacionadas — SourceCodester Performance Indicator System
En el mismo producto, de las más peligrosas a las menos.
CVE-2023-3183LOWSourceCodester Performance Indicator System addproduct.php cross site scriptingEPSS 0.6%CVE-2026-108968MEDIUMSourceCodester Performance Indicator System sales_history.php sql injectionEPSS 0.4%CVE-2026-108967MEDIUMSourceCodester Performance Indicator System edit_credit.php sql injectionEPSS 0.4%CVE-2026-108966MEDIUMSourceCodester Performance Indicator System product.php sql injectionEPSS 0.4%CVE-2026-108964MEDIUMSourceCodester Performance Indicator System addproduct.php sql injectionEPSS 0.4%CVE-2026-108965MEDIUMSourceCodester Performance Indicator System edit_quantity.php sql injectionEPSS 0.3%