CVE-2026-6148 in Vehicle Showroom Management System

Riassunto

di MITRE • 13/04/2026

A vulnerability was detected in code-projects Vehicle Showroom Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /util/MonthTotalReportUpdateFunction.php. Performing a manipulation of the argument BRANCH_ID results in sql injection. The attack is possible to be carried out remotely. The exploit is now public and may be used.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Responsabile: VulDB
• Divulgazione: 13/04/2026
• Moderazione: accettato
• Voce: VDB-357028
• CPE: pronto
• CWE: CWE-89 (confermato)
• Sfruttamento: Scaricare
• CVSS: 7.3 (VulDB)
• EPSS: 0.00379
• KEV: no
• Attività: molto basso
• Settore: Telecommunication, Government, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-6148
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-6148
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-6148/