CVE-2026-39110 in Apartment Visitors Management Systeminfo

Zusammenfassung

von MITRE • 20.04.2026

SQL Injection vulnerability in Apartment Visitors Management System Apartment Visitors Management System V1.1 in the contactno parameter of the forgot password page (forgot-password.php). This allows an unauthenticated attacker to manipulate backend SQL queries during authentication and retrieve sensitive database contents.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Zuständig

MITRE

Reservieren

06.04.2026

Veröffentlichung

20.04.2026

Moderieren

akzeptiert

Eintrag

VDB-358327

CPE

bereit

CWE

CWE-89 (bestätigt)

CVSS

7.3 (VulDB)

EPSS

0.00279

KEV

nein

Aktivitäten

low

Quellen

MITRE	https://www.cve.org/CVERecord?id=CVE-2026-39110
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-39110
CVE Details	https://www.cvedetails.com/cve/CVE-2026-39110/

◂ Zurück Übersicht Weiter ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!