HarborGuard / CVE
Back to search
CRITICALCVE-2026-37749Published Modified CNA mitre

CVE-2026-37749: A SQL injection vulnerability in CodeAstro Simple Attendance Management System v1

A SQL injection vulnerability in CodeAstro Simple Attendance Management System v1.0 allows remote unauthenticated attackers to bypass authentication via the username parameter in index.php.

Metrics

CVSS v3.1
9.8
Severity
CRITICAL
Fixed in
—
Affected Products
1
Affected packages
  • n/a / n/a
    n/a
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
CVE-2026-37749: A SQL injection vulnerability in CodeAstro Simple Attendance Management System v1 | HarborGuard CVE