CVE-2026-6151 in Vehicle Showroom Management System

Résumé

par MITRE • 13/04/2026

A vulnerability was found in code-projects Vehicle Showroom Management System 1.0. This vulnerability affects unknown code of the file /util/PaymentStatusFunction.php. The manipulation of the argument CUSTOMER_ID results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsable: VulDB
• Divulgation: 13/04/2026
• Modérer: accepté
• Entrée: VDB-357031
• CPE: prêt
• CWE: CWE-89 (confirmé)
• Exploitation: Télécharger
• CVSS: 7.3 (VulDB)
• EPSS: 0.00254
• KEV: non
• Activités: très faible
• Secteur: Transportation, Telecommunication, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-6151
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-6151
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-6151/