Skip to content
OpenAdvisories
Critical · 9.8 CVE-2026-36236 EUVD-2026-21392GHSA-h5j3-w5wp-rcr7

SourceCodester Engineers Online Portal v1.0 is vulnerable to SQL Injection in update_password.php via the new_password parameter.

Published Apr 10, 2026 · Updated Apr 14, 2026 · Assigned by mitre