CVE-2026-3751 - Vulnerability Analysis

Overview

SourceCodester Employee Task Management System 1.0 contains a sql injection caused by manipulation of the "Date" argument in /daily-attendance-report.php GET Parameter Handler, letting remote attackers execute arbitrary SQL commands, exploit requires crafted request.

Severity & Score

Impact

Remote attackers can execute arbitrary SQL commands, potentially leading to data disclosure or modification.

Mitigation

Update to the latest version.

References

• https://github.com/meifukun/Web-Security-PoCs/blob/main/Employee-Task-Management-System/SQLi-DailyAttendanceReport-date.md
• https://vuldb.com/?ctiid.349729
• https://vuldb.com/?id.349729
• https://vuldb.com/?submit.768034
• https://www.sourcecodester.com/

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner