by Kastro
Paper/Archive/CVE-2026-71248

CVE-2026-71248

Harsh21Patel Inventory-Management-System-PHP — Inventory-Management-System-PHP - Unauthenticated SQL Injection in Login and Product Deletion

EPSS 0.7%CVSS 9.8
critical.is priorityof 100
40
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 54.9.549 × 2011.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Inventory-Management-System-PHP's login.php constructs its authentication query via direct string concatenation of raw POST parameters: = "select * from user where email = '' and password = ''", with no escaping or parameterization, allowing authentication bypass via a payload such as email=' OR 1=1 LIMIT 1-- -.

Affected

ProductAffectedFixed inSource
Inventory-Management-System-PHPall versions–CNA

Scores by source

TuranSec (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

writeupgithub.com/Harsh21Patel/Inventory-Management-System-PHPwriteupgithub.com/Harsh21Patel/Inventory-Management-System-PHP/pull/3