Description
A weakness has been identified in SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP 1.0. This impacts the function saveUser of the file /public/submit.php. This manipulation of the argument Researcher causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SourceCodester | Dynamic Input Field Generator Using HTML, CSS, and PHP | 1.0 | — |
References
- VDB-393854 | SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP submit.php saveUser sql injection vdb-entry technical-description
- VDB-393854 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- CVE-2026-77392 | CVE Analysis and Report third-party-advisory
- Submit #881045 | SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP N/A Improper Input Validation third-party-advisory
- https://gist.github.com/rionyxraiza/6b22a5e02da6b8581495761ff7393760 exploit
- https://www.sourcecodester.com/ product