9.8
/ 10
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
A SQL injection vulnerability in CodeAstro Simple Attendance Management System v1.0 allows remote unauthenticated attackers to bypass authentication via the username parameter in index.php.
AI Analysis
SQL injection vulnerability allowing remote unauthenticated attackers to bypass authentication
Basic Information
ID
CVE-2026-37749
Source
mitre
Published
Apr 17, 2026 at 00:00
Modified
Apr 17, 2026 at 15:23
Affected Product
Vendor
CodeAstro
Product
Simple Attendance Management System
Version
v1.0
Affected Versions
n/a n/a n/a
CWE Classification
AI Assessment
AI Score
9.8 / 10
AI Severity
Critical
Vendor
CodeAstro
Product
Simple Attendance Management System
Version
v1.0