Threats tagged 'ghsa-qwmj-52qp-53vj'

CVE-2026-116061 is a SQL injection vulnerability in SourceCodester Performance Indicator System version 1.0. The flaw exists in the /opils/staff/edit_dealer.php file, where manipulation of the 'Contact' parameter allows remote attackers to inject SQL commands. The vulnerability has a CVSS 4.0 base score of 6.9, indicating medium severity. Exploit code is publicly available, but there are no confirmed reports of active exploitation in the wild. No official patch or remediation guidance is currently provided.