CVE-2026-6149 in Vehicle Showroom Management System

Résumé

par MITRE • 13/04/2026

A flaw has been found in code-projects Vehicle Showroom Management System 1.0. Affected by this issue is some unknown functionality of the file /util/BookVehicleFunction.php. Executing a manipulation of the argument BRANCH_ID can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsable: VulDB
• Divulgation: 13/04/2026
• Modérer: accepté
• Entrée: VDB-357029
• CPE: prêt
• CWE: CWE-89 (confirmé)
• Exploitation: Télécharger
• CVSS: 7.3 (VulDB)
• EPSS: 0.00350
• KEV: non
• Activités: très faible
• Secteur: Pharma, Hospital, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-6149
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-6149
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-6149/