{"id":"CVE-2026-124571","published":"2026-11-09T06:17:58.393","lastModified":"2026-11-09T06:17:58.597","description":"A flaw has been found in SourceCodester Simple CRUD using PHP and FPDF 1.0. Affected by this vulnerability is an unknown functionality of the file app/register.php. Executing a manipulation of the argument firstname can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used.","cvssScore":6.3,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cwes":["CWE-74","CWE-89"],"vendors":[],"products":[],"references":[{"url":"https://github.com/cm126261/CVE/issues/2","tags":[]},{"url":"https://vuldb.com/cve/CVE-2026-124571","tags":[]},{"url":"https://vuldb.com/submit/1035915","tags":[]},{"url":"https://vuldb.com/vuln/432917","tags":[]},{"url":"https://vuldb.com/vuln/432917/cti","tags":[]},{"url":"https://www.sourcecodester.com/","tags":[]}],"exploitRefs":[{"url":"https://github.com/cm126261/CVE/issues/2","tags":[]}],"hasPoc":true,"ai":null}