Logo
Retour à la veille

CVE-2026-19021

Publié : 6 août 2026
Modifié : 6 août 2026
Lien officiel NVD
Score CVSS
7.3
HIGH

Description détaillée

A security vulnerability has been detected in SourceCodester Computer Repair Shop Management System 1.0. Affected by this issue is some unknown functionality of the file /classes/Master.php?f=delete_product. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Références et Patchs

https://github.com/blue-pig-ops/CVE/issues/1https://vuldb.com/cve/CVE-2026-19021https://vuldb.com/submit/862906https://vuldb.com/vuln/386421https://vuldb.com/vuln/386421/ctihttps://www.sourcecodester.com/

Dernières Vulnérabilités

CVE-2026-55980

A denial-of-service vulnerability in CatchPulse could allow an attacker to conduct a stack buffer overrun attack, leading to a denial-of-service condition.

VOIR DÉTAILS

CVE-2026-55979

An improper access control check in CatchPulse's named pipe communication interface could allow an attacker to invoke CatchPulse functions. This is limited to operations that enforce more restrictive security policies.

VOIR DÉTAILS

CVE-2026-55978

An improper access control vulnerability in CatchPulse could allow a non-administrative local attacker to connect to an unrestricted kernel filter communication port and bypass CatchPulse's security policy enforcement.

VOIR DÉTAILS