← CVE Intelligence

CVE-2026-14640

CodeAstro Apartment Visitor Management System Login index.php sql injection PUBLISHED

Description (CNA)

A vulnerability was found in CodeAstro Apartment Visitor Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing a manipulation of the argument Username results in sql injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used.

Affected (CNA)

Vendor / productVersions
CodeAstro / Apartment Visitor Management Systemaffected 1.0

CWE

CWE-89, CWE-74

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.