CVE-2026-39109

Published April 20th, 2026

View on NVD ↗

CVSS v3

9.4

CRITICAL

CVSS v2

N/A

Affected

PROJECT

Description

SQL Injection vulnerability in Apartment Visitors Management System Apartment Visitors Management System V1.1 within the username parameter of the login page (index.php). This allows an unauthenticated attacker to manipulate backend SQL queries during authentication and retrieve sensitive database contents.

efekaanakkar/Apartment-Visitors-Management-System-CVEs

Multiple CVEs affecting Apartment Visitors Management System v1.1, including SQL Injection and Stored XSS vulnerabilities with detailed analysis and proof-of-concept.

GitHub