PT-2026-22654 · Sourcecodester · Personnel Property Equipment System

Zhang Qi · Publicado 2026-03-02 · Atualizado 2026-03-06 · CVE-2026-26700

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions sourcecodester Personnel Property Equipment System version 1.0

Description The software is susceptible to SQL Injection in the '/ppes/admin/edit employee.php' endpoint. The vulnerability exists due to insufficient input validation when processing data submitted to this endpoint. The vulnerable parameter is not explicitly identified.

Recommendations Apply appropriate input validation and sanitization techniques to all data submitted to the '/ppes/admin/edit employee.php' endpoint.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2026-26700

Produtos afetados

Personnel Property Equipment System

Referências · 9

• 🔥 https://github.com/Thirtypenny77/bug_report/blob/main/sourcecodester/personel-property-equipment-system/SQL-1.md · Exploit
• https://twitter.com/cracbot/status/2029512423699595423 · Publicação no Twitter
• https://t.me/cveNotify/154034 · Publicação no Telegram
• https://t.me/CVEtracker/46133 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2026-26700 · Nota de Segurança
• https://twitter.com/CVEnew/status/2028523511149388277 · Publicação no Twitter
• https://twitter.com/infoflowcloud/status/2028526207109664818 · Publicação no Twitter
• https://twitter.com/cracbot/status/2029874886349590943 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-26700 · Aviso do Fabricante