CVE-2026-6153 in Vehicle Showroom Management System

Riassunto

di MITRE • 13/04/2026

A vulnerability was identified in code-projects Vehicle Showroom Management System 1.0. Impacted is an unknown function of the file /util/StaffDetailsFunction.php. Such manipulation of the argument STAFF_ID leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsabile: VulDB
• Divulgazione: 13/04/2026
• Moderazione: accettato
• Voce: VDB-357033
• CPE: pronto
• CWE: CWE-89 (confermato)
• Sfruttamento: Scaricare
• CVSS: 7.3 (VulDB)
• EPSS: 0.00318
• KEV: no
• Attività: molto basso
• Settore: Hospital, Education, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-6153
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-6153
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-6153/