Beveiligingsadvies

CVE-2026-39110

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-20 00:00:00
Laatst bijgewerkt 2026-04-20 18:34:55
Toegewezen door mitre
CVSS-score 8.2
Status PUBLISHED

Beschrijving

SQL Injection vulnerability in Apartment Visitors Management System Apartment Visitors Management System V1.1 in the contactno parameter of the forgot password page (forgot-password.php). This allows an unauthenticated attacker to manipulate backend SQL queries during authentication and retrieve sensitive database contents.