CVE-2026-90876: fallo de gravedad media en SourceCodester Online Faculty Clearance System
SourceCodester Online Faculty Clearance System delete_requirement.php sql injection
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
33Vexday Risk Score
Sin señal de explotación. Ella tiene prueba de concepto pública.
ssvc Attendcvss 6.9epss 0.4%
A vulnerability has been found in SourceCodester Online Faculty Clearance System 1.0. Affected by this vulnerability is an unknown functionality of the file /delete_requirement.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Productos afectados
SourceCodester · Online Faculty Clearance SystemPoCs públicas encontradas — 1
cve_referencegithub.com/OnlyCMJB/cve/issues/2no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
CVEs relacionadas — SourceCodester Online Faculty Clearance System
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-91004MEDIUMSourceCodester Online Faculty Clearance System delete_faculty1.php sql injectionEPSS 0.4%CVE-2026-90877MEDIUMSourceCodester Online Faculty Clearance System update_requirement_status.php sql injectionEPSS 0.4%CVE-2026-91005MEDIUMSourceCodester Online Faculty Clearance System Profile Picture Upload edit_picture.php move_uploaded_file unrestricted uploadEPSS 0.4%