Skip to content
CVSS 7.3 · HIGH

CVE-2026-7072

A vulnerability was detected in CodePanda Source canteen_management_system 1.0. Affected by this issue is some unknown functionality of the file /api/login.php. The manipulation of the argument Username results in sql injection. The attack can be executed remotely. The exploit is now public and may be used.

Ver en NVD

Análisis

The vulnerability affects a specific canteen management system which appears to be a small or niche project. While it contains a remote SQL injection flaw in the login functionality, it lacks the deployment scale or professional relevance required to alert the broader developer community.

Severidad

Puntaje: 7.3(HIGH)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
AV: NETWORK
AC: LOW
PR: NONE
UI: NONE
S: UNCHANGED
C: LOW
I: LOW
A: LOW
Tipo de falla (CWE): CWE-74CWE-89

EPSS

Probabilidad de explotación (próx. 30 días): 0.0004 (0.0%)
Percentil: 10.8%
EPSS: 2026-05-06

Descripción técnica

A vulnerability was detected in CodePanda Source canteen_management_system 1.0. Affected by this issue is some unknown functionality of the file /api/login.php. The manipulation of the argument Username results in sql injection. The attack can be executed remotely. The exploit is now public and may be used.

Publicada: 27/4/2026, 1:16:16
Última modificación: 29/4/2026, 1:00:01

Referencias

InicioEventosBlogRecursosEquipo