CVE-2026-26883 - Vulnerability Analysis

Overview

Sourcecodester Simple Online Men's Salon Management System v1.0 contains a sql injection caused by unsanitized input in /msms/classes/Master.php?f=delete_appointment, letting attackers execute arbitrary SQL commands remotely, exploit requires crafted request.

Severity & Score

Impact

Attackers can execute arbitrary SQL commands, potentially leading to data disclosure, modification, or deletion.

Mitigation

Update to the latest version with SQL injection fixes or apply proper input sanitization.

References

• https://github.com/shininadd/bug_report/blob/main/Sourcecodester/simple-online-mens-salon-management-system/SQL-1.md

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner