Filtered by vendor Harsh21patel
Subscriptions
Filtered by product Inventory-management-system-php
Subscriptions
Total
1 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-71248 | 1 Harsh21patel | 1 Inventory-management-system-php | 2026-08-10 | 9.8 Critical |
| Inventory-Management-System-PHP's login.php constructs its authentication query via direct string concatenation of raw POST parameters: = "select * from user where email = '' and password = ''", with no escaping or parameterization, allowing authentication bypass via a payload such as email=' OR 1=1 LIMIT 1-- -. | ||||
Page 1 of 1.