https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T19:59:53.914827+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-71248 CVE-2026-71248 — Inventory-Management-System-PHP - Unauthenticated SQL Injection in Login and Product Deletion 2026-10-10T19:59:53.915868+00:00

Affected: Harsh21Patel Inventory-Management-System-PHP

Inventory-Management-System-PHP's login.php constructs its authentication query via direct string concatenation of raw POST parameters: = "select * from user where email = '' and password = ''", with no escaping or parameterization, allowing authentication bypass via a payload such as email=' OR 1=1 LIMIT 1-- -.