This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2026-5681 | BDVDB-2026-324992 Detail

itsourcecodesanitize or validate this input

Description#

A flaw has been found in itsourcecode sanitize or validate this input 1.0. This impacts an unknown function of the file /borrowedequip.php of the component Parameter Handler. This manipulation of the argument emp_id causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used.

Impact#

Per CVSS v3.1: confidentiality impact low, integrity impact low, availability impact low. Attack vector: network.

Weaknesses#

  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
  • CWE-74 Injection

References#

Exploit#

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.