PT-2026-22753 · Sourcecodester · Sourcecodester Simple Online Mens Salon Management System

Shininadd · Publicado 2026-03-03 · Atualizado 2026-03-03 · CVE-2026-26885

Positive Technologies (AI Summary)

CVSS v3.1

2.7

Baixa

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Sourcecodester Online Men's Salon Management System version 1.0 Sourcecodester Simple Online Men's Salon Management System version 1.0

Description The software is susceptible to SQL Injection. This issue affects the /classes/Master.php?f=delete service endpoint. The f parameter in the API endpoint is vulnerable. Successful exploitation could allow an attacker to manipulate database queries.

Recommendations Apply appropriate input validation and sanitization techniques to the f parameter in the /classes/Master.php?f=delete service endpoint.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2026-26885

Produtos afetados

Sourcecodester Simple Online Mens Salon Management System

Referências · 5

• 🔥 https://github.com/shininadd/bug_report/blob/main/Sourcecodester/simple-online-mens-salon-management-system/SQL-2.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-26885 · Nota de Segurança
• https://twitter.com/VulmonFeeds/status/2028898628530483353 · Publicação no Twitter
• https://t.me/CVEtracker/46220 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2026-26885 · Aviso do Fabricante