PT-2026-30444 · Sourcecodester · Record Management System

Chenkh · Published 2026-04-05 · Updated 2026-04-05 · CVE-2026-5575

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SourceCodester/jkev Record Management System version 1.0

Description A SQL injection issue exists in the Login component's index.php file due to the manipulation of the Username argument. This allows for remote attacks. The exploit is publicly available.

Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, sanitize the Username input to prevent SQL injection.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2026-5575

Affected Products

Record Management System

References · 8

• 🔥 https://github.com/whatyourname12345/CVE/blob/main/PRMS/cve_SQL.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-5575 · Security Note
• https://vuldb.com/vuln/355345/cti · Note
• https://twitter.com/CVEnew/status/2040819210926915837 · Twitter Post
• https://vuldb.com/vuln/355345 · Note
• https://twitter.com/infoflowcloud/status/2040820604757016596 · Twitter Post
• https://vuldb.com/submit/783472 · Note
• https://twitter.com/cyberbivash/status/2040829230682939889 · Twitter Post