https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 05:40:10 +0000 https://cve.radiocsirt.org/vuln/cve-2026-71207 <p><strong>Affected:</strong> mrswapnilsahu Stock-Inventory-Management-System</p> <p>The Stock-Inventory-Management-System application&#39;s login.php assigns raw username/password values to and builds its authentication query by directly concatenating those session values into a SQL statement with no parameterization or escaping. The same script additionally contains hardcoded administrative credentials (admin/neola) in a post-login conditional check, providing a second, independent full-authentication-bypass path.</p> <p><strong>Affected:</strong> mrswapnilsahu Stock-Inventory-Management-System</p> <p>The Stock-Inventory-Management-System application&#39;s login.php assigns raw username/password values to and builds its authentication query by directly concatenating those session values into a SQL statement with no parameterization or escaping. The same script additionally contains hardcoded administrative credentials (admin/neola) in a post-login conditional check, providing a second, independent full-authentication-bypass path.</p> https://cve.radiocsirt.org/vuln/cve-2026-71207