CVE-2026-102913

Publié : 30 septembre 2026

Modifié : 30 septembre 2026

Score CVSS

7.3

HIGH

Description détaillée

A security flaw has been discovered in SourceCodester Car Driving School Management System 1.0. Impacted is an unknown function of the file /classes/Master.php?f=save_enrollment. The manipulation results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Références et Patchs

https://github.com/zhongzhicong1998/CVE/issues/2 https://vuldb.com/cve/CVE-2026-102913 https://vuldb.com/submit/954038 https://vuldb.com/vuln/411637 https://vuldb.com/vuln/411637/cti https://www.sourcecodester.com/

Dernières Vulnérabilités

CVE-2026-103111

PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data.

VOIR DÉTAILS

CVE-2026-86134

A NULL pointer dereference vulnerability in the WatchGuard Fireware OS authentication process allows a remote, unauthenticated attacker to crash the management daemon by sending a specially request to the login interface, resulting in a denial of service.

VOIR DÉTAILS

CVE-2026-103110

Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation that allows a remote attacker to execute code remotely as an unprivileged user on a Pexip Infinity Conferencing Node.

VOIR DÉTAILS