CVE-2026-39110 in Apartment Visitors Management Systeminformación

Resumen

por MITRE • 2026-04-20

SQL Injection vulnerability in Apartment Visitors Management System Apartment Visitors Management System V1.1 in the contactno parameter of the forgot password page (forgot-password.php). This allows an unauthenticated attacker to manipulate backend SQL queries during authentication and retrieve sensitive database contents.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Responsable

MITRE

Reservar

2026-04-06

Divulgación

2026-04-20

Moderación

aceptado

Artículo

VDB-358327

CPE

listo

EPSS

0.00279

KEV

no

Actividades

bajo

Fuentes

Want to stay up to date on a daily basis?

Enable the mail alert feature now!