CVE-2026-78143: SQL Injection in code-projects Barangay Resident Profiling Management System

The Barangay Resident Profiling Management System 1.0 contains a SQL injection vulnerability in an unspecified function within residents.php related to the Resident Search Functionality. By manipulating the Search parameter, an attacker can inject SQL commands remotely without any privileges or user interaction. This vulnerability has been publicly disclosed and exploit code is available, increasing the risk of exploitation. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and limited confidentiality, integrity, and availability impacts.

Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to execute arbitrary SQL commands on the backend database. This may lead to unauthorized data access or modification within the affected system. The impact is rated medium based on the CVSS score of 6.9 and the limited scope of confidentiality, integrity, and availability impacts.

No official patch or remediation guidance is currently provided. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider restricting access to the vulnerable functionality or applying input validation and parameterized queries if possible.