Skip to content
OpenAdvisories
High · 7.5 CVE-2026-39111 EUVD-2026-23920GHSA-2mm2-ghgp-p33q

SQL Injection vulnerability in Apartment Visitors Management System Apartment Visitors Management System V1.1 in the email parameter of the…

Published Apr 20, 2026 · Updated Apr 20, 2026 · Assigned by mitre

Description

SQL Injection vulnerability in Apartment Visitors Management System Apartment Visitors Management System V1.1 in the email parameter of the forgot password page (forgot-password.php). This allows an unauthenticated attacker to manipulate backend SQL queries and retrieve sensitive user data.

References