CVE-2026-39111

Published April 20th, 2026

View on NVD ↗

CVSS v3

7.5

HIGH

CVSS v2

N/A

Affected

PROJECT

Description

SQL Injection vulnerability in Apartment Visitors Management System Apartment Visitors Management System V1.1 in the email parameter of the forgot password page (forgot-password.php). This allows an unauthenticated attacker to manipulate backend SQL queries and retrieve sensitive user data.

efekaanakkar/Apartment-Visitors-Management-System-CVEs

Multiple CVEs affecting Apartment Visitors Management System v1.1, including SQL Injection and Stored XSS vulnerabilities with detailed analysis and proof-of-concept.

GitHub