CVE-2026-39110

Published April 20th, 2026

View on NVD ↗

CVSS v3

8.2

HIGH

CVSS v2

N/A

Affected

PROJECT

Description

SQL Injection vulnerability in Apartment Visitors Management System Apartment Visitors Management System V1.1 in the contactno parameter of the forgot password page (forgot-password.php). This allows an unauthenticated attacker to manipulate backend SQL queries during authentication and retrieve sensitive database contents.

efekaanakkar/Apartment-Visitors-Management-System-CVEs

Multiple CVEs affecting Apartment Visitors Management System v1.1, including SQL Injection and Stored XSS vulnerabilities with detailed analysis and proof-of-concept.

GitHub