CVE-2026-36923 - Vulnerability Analysis

Overview

Sourcecodester Cab Management System 1.0 contains a SQL injection caused by improper sanitization in /cms/admin/bookings/view_booking.php, letting attackers execute arbitrary SQL commands remotely, exploit requires crafted request.

Severity & Score

Impact

Attackers can execute arbitrary SQL commands, potentially leading to data disclosure or modification.

Mitigation

Update to the latest version or apply patches to fix SQL injection in /cms/admin/bookings/view_booking.php.

References

• https://github.com/hubdk01/bug_report/blob/main/Sourcecodester/cab-management-system/SQL-2.md

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner