CVE 9.8 CRITICAL

CVE-2026-37749_CVE-2026-37749

9.8 / 10
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

A SQL injection vulnerability in CodeAstro Simple Attendance Management System v1.0 allows remote unauthenticated attackers to bypass authentication via the username parameter in index.php.

AI Analysis

SQL injection vulnerability allowing remote unauthenticated attackers to bypass authentication

Basic Information

ID CVE-2026-37749
Source mitre
Published Apr 17, 2026 at 00:00
Modified Apr 17, 2026 at 15:23

Affected Product

Vendor CodeAstro
Product Simple Attendance Management System
Version v1.0
Affected Versions n/a n/a n/a

CWE Classification

AI Assessment

AI Score 9.8 / 10
AI Severity Critical
Vendor CodeAstro
Product Simple Attendance Management System
Version v1.0

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.