PT-2026-22752 · Sourcecodester · Online Men'S Salon Management System+1

Shininadd · Publicado 2026-03-03 · Atualizado 2026-03-03 · CVE-2026-26884

Positive Technologies (AI Summary)

CVSS v3.1

2.7

Baixa

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Sourcecodester Online Men's Salon Management System version 1.0 Sourcecodester Simple Online Men's Salon Management System version 1.0

Description The software is susceptible to SQL Injection. This issue affects the /msms/admin/appointments/view appointment.php endpoint. The vulnerability exists due to insufficient input validation, potentially allowing an attacker to manipulate database queries. The vulnerable parameter is not specified.

Recommendations Apply input validation and sanitization to all user-supplied data used in database queries related to the /msms/admin/appointments/view appointment.php endpoint.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2026-26884

Produtos afetados

Online Men'S Salon Management System

Simple Online Mens Salon Management System

Referências · 4

• 🔥 https://github.com/shininadd/bug_report/blob/main/Sourcecodester/simple-online-mens-salon-management-system/SQL-3.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-26884 · Nota de Segurança
• https://t.me/CVEtracker/46219 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2026-26884 · Aviso do Fabricante