CVE-2026-36236

Published April 10th, 2026

View on NVD ↗

CVSS v3

9.8

CRITICAL

CVSS v2

N/A

Affected

1

PROJECT

Description

SourceCodester Engineers Online Portal v1.0 is vulnerable to SQL Injection in update_password.php via the new_password parameter.

Amorsec/CVE-PHP

Detected vulnerabilities in php projects.

GitHub