CVE-2026-108926: falha de média gravidade em itsourcecode Baptism Information Management…
itsourcecode Baptism Information Management System ebaptism.php sql injection
Publicada em
30Vexday Risk Score
Sem sinal de exploração. Ela tem prova de conceito pública.
ssvc Attendcvss 5.3
probabilidade de exploração
—
exploração observada
nãonenhuma fonte reporta
1 exploit(s) público(s)
A security flaw has been discovered in itsourcecode Baptism Information Management System 1.0. This affects an unknown part of the file ebaptism.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
itsourcecode · Baptism Information Management SystemPoCs públicas encontradas — 1
cve_referencegithub.com/yulisec/submit/issues/1não verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
CVEs relacionadas — itsourcecode Baptism Information Management…
No mesmo produto, das mais perigosas para as menos.
CVE-2026-13551MEDIUMitsourcecode Baptism Information Management System editBaptism.php sql injectionEPSS 0.4%CVE-2026-13550MEDIUMitsourcecode Baptism Information Management System delbaptism.php sql injectionEPSS 0.4%CVE-2025-10404MEDIUMitsourcecode Baptism Information Management System rptbaptismal.php sql injectionEPSS 0.4%CVE-2025-10405MEDIUMitsourcecode Baptism Information Management System listbaptism.php sql injectionEPSS 0.4%CVE-2026-108927MEDIUMitsourcecode Baptism Information Management System pbaptism.php sql injectionEPSS —