Search
Find a vulnerability
Search criteria
8 vulnerabilities by satya-vinay
CVE-2026-112144 (GCVE-0-2026-112144)
Vulnerability from nvd – Published: 2026-10-19 13:30 – Updated: 2026-10-19 14:25
VLAI
EPSS
VEX
Title
satya-vinay Events-Management-System project.sql file access
Summary
A weakness has been identified in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. This affects an unknown part of the file project.sql. Executing a manipulation can lead to files or directories accessible. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The project was informed of the problem early through an issue report but has not responded yet.
Severity
SSVC
Exploitation: poc
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-19 14:25 UTC
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/422249 | vdb-entry |
| https://vuldb.com/vuln/422249/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-112144 | third-party-advisory |
| https://vuldb.com/submit/1013213 | third-party-advisory |
| https://github.com/satya-vinay/Events-Management-… | exploitissue-tracking |
| https://github.com/satya-vinay/Events-Management-… | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| satya-vinay | Events-Management-System |
Affected:
437c77ceb69bf9fe2e3f4f46f7871b83f425383a
cpe:2.3:a:satya-vinay:events-management-system:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-112144",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-19T14:25:16.126751Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-19T14:25:40.803Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/satya-vinay/Events-Management-System/issues/6"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:satya-vinay:events-management-system:*:*:*:*:*:*:*:*"
],
"product": "Events-Management-System",
"vendor": "satya-vinay",
"versions": [
{
"status": "affected",
"version": "437c77ceb69bf9fe2e3f4f46f7871b83f425383a"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "xbjds (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A weakness has been identified in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. This affects an unknown part of the file project.sql. Executing a manipulation can lead to files or directories accessible. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N/E:POC/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-552",
"description": "Files or Directories Accessible",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-425",
"description": "Direct Request",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-19T13:30:20.857Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-422249 | satya-vinay Events-Management-System project.sql file access",
"tags": [
"vdb-entry"
],
"url": "https://vuldb.com/vuln/422249"
},
{
"name": "VDB-422249 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/422249/cti"
},
{
"name": "CVE-2026-112144 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-112144"
},
{
"name": "Submit #1013213 | satya-vinay Events-Management-System 437c77ceb69bf9fe2e3f4f46f7871b83f425383a Exposure of Private Personal Information to an Unauthorized Acto",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/1013213"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/satya-vinay/Events-Management-System/issues/6"
},
{
"tags": [
"product"
],
"url": "https://github.com/satya-vinay/Events-Management-System/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-10-19T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-10-19T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-10-19T07:28:15.000Z",
"value": "VulDB entry last update"
}
],
"title": "satya-vinay Events-Management-System project.sql file access",
"x_generator": [
"VulDB PVTS v202610"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-112144",
"datePublished": "2026-10-19T13:30:20.857Z",
"dateReserved": "2026-10-19T05:22:40.064Z",
"dateUpdated": "2026-10-19T14:25:40.803Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-112143 (GCVE-0-2026-112143)
Vulnerability from nvd – Published: 2026-10-19 13:15 – Updated: 2026-10-19 16:35
VLAI
EPSS
VEX
Title
satya-vinay Events-Management-System missing authentication
Summary
A security flaw has been discovered in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. Affected by this issue is some unknown functionality. Performing a manipulation results in missing authentication. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. Multiple endpoints are affected. The project was informed of the problem early through an issue report but has not responded yet.
Severity
SSVC
Exploitation: poc
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-19 15:46 UTC
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/422248 | vdb-entry |
| https://vuldb.com/vuln/422248/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-112143 | third-party-advisory |
| https://vuldb.com/submit/1013211 | third-party-advisory |
| https://github.com/satya-vinay/Events-Management-… | exploitissue-tracking |
| https://github.com/satya-vinay/Events-Management-… | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| satya-vinay | Events-Management-System |
Affected:
437c77ceb69bf9fe2e3f4f46f7871b83f425383a
cpe:2.3:a:satya-vinay:events-management-system:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-112143",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-19T15:46:45.472063Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-19T16:35:25.242Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:satya-vinay:events-management-system:*:*:*:*:*:*:*:*"
],
"product": "Events-Management-System",
"vendor": "satya-vinay",
"versions": [
{
"status": "affected",
"version": "437c77ceb69bf9fe2e3f4f46f7871b83f425383a"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "xbjds (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A security flaw has been discovered in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. Affected by this issue is some unknown functionality. Performing a manipulation results in missing authentication. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. Multiple endpoints are affected. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 7.5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-306",
"description": "Missing Authentication",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-287",
"description": "Improper Authentication",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-19T13:15:20.213Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-422248 | satya-vinay Events-Management-System missing authentication",
"tags": [
"vdb-entry"
],
"url": "https://vuldb.com/vuln/422248"
},
{
"name": "VDB-422248 | CTI Indicators (IOB, IOC)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/422248/cti"
},
{
"name": "CVE-2026-112143 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-112143"
},
{
"name": "Submit #1013211 | satya-vinay Events-Management-System 437c77ceb69bf9fe2e3f4f46f7871b83f425383a Missing Authentication",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/1013211"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/satya-vinay/Events-Management-System/issues/4"
},
{
"tags": [
"product"
],
"url": "https://github.com/satya-vinay/Events-Management-System/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-10-19T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-10-19T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-10-19T07:28:05.000Z",
"value": "VulDB entry last update"
}
],
"title": "satya-vinay Events-Management-System missing authentication",
"x_generator": [
"VulDB PVTS v202610"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-112143",
"datePublished": "2026-10-19T13:15:20.213Z",
"dateReserved": "2026-10-19T05:22:36.189Z",
"dateUpdated": "2026-10-19T16:35:25.242Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-112142 (GCVE-0-2026-112142)
Vulnerability from nvd – Published: 2026-10-19 13:00 – Updated: 2026-10-19 18:37
VLAI
EPSS
VEX
Title
satya-vinay Events-Management-System Registration-Delete dodelete.php sql injection
Summary
A vulnerability was identified in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. Affected by this vulnerability is an unknown functionality of the file dodelete.php of the component Registration-Delete Handler. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The project was informed of the problem early through an issue report but has not responded yet.
Severity
SSVC
Exploitation: poc
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-19 18:37 UTC
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/422247 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/422247/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-112142 | third-party-advisory |
| https://vuldb.com/submit/1013210 | third-party-advisory |
| https://github.com/satya-vinay/Events-Management-… | exploitissue-tracking |
| https://github.com/satya-vinay/Events-Management-… | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| satya-vinay | Events-Management-System |
Affected:
437c77ceb69bf9fe2e3f4f46f7871b83f425383a
cpe:2.3:a:satya-vinay:events-management-system:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-112142",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-19T18:37:08.764217Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-19T18:37:40.003Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:satya-vinay:events-management-system:*:*:*:*:*:*:*:*"
],
"modules": [
"Registration-Delete Handler"
],
"product": "Events-Management-System",
"vendor": "satya-vinay",
"versions": [
{
"status": "affected",
"version": "437c77ceb69bf9fe2e3f4f46f7871b83f425383a"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "xbjds (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was identified in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. Affected by this vulnerability is an unknown functionality of the file dodelete.php of the component Registration-Delete Handler. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 7.5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "SQL Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-74",
"description": "Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-19T13:00:19.942Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-422247 | satya-vinay Events-Management-System Registration-Delete dodelete.php sql injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/422247"
},
{
"name": "VDB-422247 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/422247/cti"
},
{
"name": "CVE-2026-112142 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-112142"
},
{
"name": "Submit #1013210 | satya-vinay Events-Management-System 437c77ceb69bf9fe2e3f4f46f7871b83f425383a SQL Injection",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/1013210"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/satya-vinay/Events-Management-System/issues/3"
},
{
"tags": [
"product"
],
"url": "https://github.com/satya-vinay/Events-Management-System/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-10-19T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-10-19T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-10-19T07:28:01.000Z",
"value": "VulDB entry last update"
}
],
"title": "satya-vinay Events-Management-System Registration-Delete dodelete.php sql injection",
"x_generator": [
"VulDB PVTS v202610"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-112142",
"datePublished": "2026-10-19T13:00:19.942Z",
"dateReserved": "2026-10-19T05:22:32.593Z",
"dateUpdated": "2026-10-19T18:37:40.003Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-112141 (GCVE-0-2026-112141)
Vulnerability from nvd – Published: 2026-10-19 12:30 – Updated: 2026-10-19 12:30
VLAI
EPSS
VEX
Title
satya-vinay Events-Management-System Registration-Edit doedit.php mysqli_query sql injection
Summary
A vulnerability was determined in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. Affected is the function mysqli_query of the file doedit.php of the component Registration-Edit Handler. This manipulation of the argument id/name/title/year/gender/fromdate/todate/people causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The project was informed of the problem early through an issue report but has not responded yet.
Severity
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/422246 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/422246/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-112141 | third-party-advisory |
| https://vuldb.com/submit/1013207 | third-party-advisory |
| https://github.com/satya-vinay/Events-Management-… | exploitissue-tracking |
| https://github.com/satya-vinay/Events-Management-… | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| satya-vinay | Events-Management-System |
Affected:
437c77ceb69bf9fe2e3f4f46f7871b83f425383a
cpe:2.3:a:satya-vinay:events-management-system:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:satya-vinay:events-management-system:*:*:*:*:*:*:*:*"
],
"modules": [
"Registration-Edit Handler"
],
"product": "Events-Management-System",
"vendor": "satya-vinay",
"versions": [
{
"status": "affected",
"version": "437c77ceb69bf9fe2e3f4f46f7871b83f425383a"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "xbjds (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was determined in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. Affected is the function mysqli_query of the file doedit.php of the component Registration-Edit Handler. This manipulation of the argument id/name/title/year/gender/fromdate/todate/people causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 7.5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "SQL Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-74",
"description": "Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-19T12:30:13.033Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-422246 | satya-vinay Events-Management-System Registration-Edit doedit.php mysqli_query sql injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/422246"
},
{
"name": "VDB-422246 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/422246/cti"
},
{
"name": "CVE-2026-112141 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-112141"
},
{
"name": "Submit #1013207 | satya-vinay Events-Management-System 437c77ceb69bf9fe2e3f4f46f7871b83f425383a SQL Injection",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/1013207"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/satya-vinay/Events-Management-System/issues/2"
},
{
"tags": [
"product"
],
"url": "https://github.com/satya-vinay/Events-Management-System/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-10-19T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-10-19T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-10-19T07:27:57.000Z",
"value": "VulDB entry last update"
}
],
"title": "satya-vinay Events-Management-System Registration-Edit doedit.php mysqli_query sql injection",
"x_generator": [
"VulDB PVTS v202610"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-112141",
"datePublished": "2026-10-19T12:30:13.033Z",
"dateReserved": "2026-10-19T05:22:28.785Z",
"dateUpdated": "2026-10-19T12:30:13.033Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-112144 (GCVE-0-2026-112144)
Vulnerability from cvelistv5 – Published: 2026-10-19 13:30 – Updated: 2026-10-19 14:25
VLAI
EPSS
VEX
Title
satya-vinay Events-Management-System project.sql file access
Summary
A weakness has been identified in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. This affects an unknown part of the file project.sql. Executing a manipulation can lead to files or directories accessible. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The project was informed of the problem early through an issue report but has not responded yet.
Severity
SSVC
Exploitation: poc
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-19 14:25 UTC
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/422249 | vdb-entry |
| https://vuldb.com/vuln/422249/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-112144 | third-party-advisory |
| https://vuldb.com/submit/1013213 | third-party-advisory |
| https://github.com/satya-vinay/Events-Management-… | exploitissue-tracking |
| https://github.com/satya-vinay/Events-Management-… | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| satya-vinay | Events-Management-System |
Affected:
437c77ceb69bf9fe2e3f4f46f7871b83f425383a
cpe:2.3:a:satya-vinay:events-management-system:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-112144",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-19T14:25:16.126751Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-19T14:25:40.803Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/satya-vinay/Events-Management-System/issues/6"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:satya-vinay:events-management-system:*:*:*:*:*:*:*:*"
],
"product": "Events-Management-System",
"vendor": "satya-vinay",
"versions": [
{
"status": "affected",
"version": "437c77ceb69bf9fe2e3f4f46f7871b83f425383a"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "xbjds (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A weakness has been identified in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. This affects an unknown part of the file project.sql. Executing a manipulation can lead to files or directories accessible. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N/E:POC/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-552",
"description": "Files or Directories Accessible",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-425",
"description": "Direct Request",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-19T13:30:20.857Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-422249 | satya-vinay Events-Management-System project.sql file access",
"tags": [
"vdb-entry"
],
"url": "https://vuldb.com/vuln/422249"
},
{
"name": "VDB-422249 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/422249/cti"
},
{
"name": "CVE-2026-112144 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-112144"
},
{
"name": "Submit #1013213 | satya-vinay Events-Management-System 437c77ceb69bf9fe2e3f4f46f7871b83f425383a Exposure of Private Personal Information to an Unauthorized Acto",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/1013213"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/satya-vinay/Events-Management-System/issues/6"
},
{
"tags": [
"product"
],
"url": "https://github.com/satya-vinay/Events-Management-System/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-10-19T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-10-19T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-10-19T07:28:15.000Z",
"value": "VulDB entry last update"
}
],
"title": "satya-vinay Events-Management-System project.sql file access",
"x_generator": [
"VulDB PVTS v202610"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-112144",
"datePublished": "2026-10-19T13:30:20.857Z",
"dateReserved": "2026-10-19T05:22:40.064Z",
"dateUpdated": "2026-10-19T14:25:40.803Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-112143 (GCVE-0-2026-112143)
Vulnerability from cvelistv5 – Published: 2026-10-19 13:15 – Updated: 2026-10-19 16:35
VLAI
EPSS
VEX
Title
satya-vinay Events-Management-System missing authentication
Summary
A security flaw has been discovered in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. Affected by this issue is some unknown functionality. Performing a manipulation results in missing authentication. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. Multiple endpoints are affected. The project was informed of the problem early through an issue report but has not responded yet.
Severity
SSVC
Exploitation: poc
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-19 15:46 UTC
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/422248 | vdb-entry |
| https://vuldb.com/vuln/422248/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-112143 | third-party-advisory |
| https://vuldb.com/submit/1013211 | third-party-advisory |
| https://github.com/satya-vinay/Events-Management-… | exploitissue-tracking |
| https://github.com/satya-vinay/Events-Management-… | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| satya-vinay | Events-Management-System |
Affected:
437c77ceb69bf9fe2e3f4f46f7871b83f425383a
cpe:2.3:a:satya-vinay:events-management-system:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-112143",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-19T15:46:45.472063Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-19T16:35:25.242Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:satya-vinay:events-management-system:*:*:*:*:*:*:*:*"
],
"product": "Events-Management-System",
"vendor": "satya-vinay",
"versions": [
{
"status": "affected",
"version": "437c77ceb69bf9fe2e3f4f46f7871b83f425383a"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "xbjds (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A security flaw has been discovered in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. Affected by this issue is some unknown functionality. Performing a manipulation results in missing authentication. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. Multiple endpoints are affected. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 7.5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-306",
"description": "Missing Authentication",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-287",
"description": "Improper Authentication",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-19T13:15:20.213Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-422248 | satya-vinay Events-Management-System missing authentication",
"tags": [
"vdb-entry"
],
"url": "https://vuldb.com/vuln/422248"
},
{
"name": "VDB-422248 | CTI Indicators (IOB, IOC)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/422248/cti"
},
{
"name": "CVE-2026-112143 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-112143"
},
{
"name": "Submit #1013211 | satya-vinay Events-Management-System 437c77ceb69bf9fe2e3f4f46f7871b83f425383a Missing Authentication",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/1013211"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/satya-vinay/Events-Management-System/issues/4"
},
{
"tags": [
"product"
],
"url": "https://github.com/satya-vinay/Events-Management-System/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-10-19T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-10-19T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-10-19T07:28:05.000Z",
"value": "VulDB entry last update"
}
],
"title": "satya-vinay Events-Management-System missing authentication",
"x_generator": [
"VulDB PVTS v202610"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-112143",
"datePublished": "2026-10-19T13:15:20.213Z",
"dateReserved": "2026-10-19T05:22:36.189Z",
"dateUpdated": "2026-10-19T16:35:25.242Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-112142 (GCVE-0-2026-112142)
Vulnerability from cvelistv5 – Published: 2026-10-19 13:00 – Updated: 2026-10-19 18:37
VLAI
EPSS
VEX
Title
satya-vinay Events-Management-System Registration-Delete dodelete.php sql injection
Summary
A vulnerability was identified in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. Affected by this vulnerability is an unknown functionality of the file dodelete.php of the component Registration-Delete Handler. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The project was informed of the problem early through an issue report but has not responded yet.
Severity
SSVC
Exploitation: poc
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-19 18:37 UTC
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/422247 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/422247/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-112142 | third-party-advisory |
| https://vuldb.com/submit/1013210 | third-party-advisory |
| https://github.com/satya-vinay/Events-Management-… | exploitissue-tracking |
| https://github.com/satya-vinay/Events-Management-… | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| satya-vinay | Events-Management-System |
Affected:
437c77ceb69bf9fe2e3f4f46f7871b83f425383a
cpe:2.3:a:satya-vinay:events-management-system:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-112142",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-19T18:37:08.764217Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-19T18:37:40.003Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:satya-vinay:events-management-system:*:*:*:*:*:*:*:*"
],
"modules": [
"Registration-Delete Handler"
],
"product": "Events-Management-System",
"vendor": "satya-vinay",
"versions": [
{
"status": "affected",
"version": "437c77ceb69bf9fe2e3f4f46f7871b83f425383a"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "xbjds (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was identified in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. Affected by this vulnerability is an unknown functionality of the file dodelete.php of the component Registration-Delete Handler. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 7.5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "SQL Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-74",
"description": "Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-19T13:00:19.942Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-422247 | satya-vinay Events-Management-System Registration-Delete dodelete.php sql injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/422247"
},
{
"name": "VDB-422247 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/422247/cti"
},
{
"name": "CVE-2026-112142 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-112142"
},
{
"name": "Submit #1013210 | satya-vinay Events-Management-System 437c77ceb69bf9fe2e3f4f46f7871b83f425383a SQL Injection",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/1013210"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/satya-vinay/Events-Management-System/issues/3"
},
{
"tags": [
"product"
],
"url": "https://github.com/satya-vinay/Events-Management-System/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-10-19T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-10-19T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-10-19T07:28:01.000Z",
"value": "VulDB entry last update"
}
],
"title": "satya-vinay Events-Management-System Registration-Delete dodelete.php sql injection",
"x_generator": [
"VulDB PVTS v202610"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-112142",
"datePublished": "2026-10-19T13:00:19.942Z",
"dateReserved": "2026-10-19T05:22:32.593Z",
"dateUpdated": "2026-10-19T18:37:40.003Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-112141 (GCVE-0-2026-112141)
Vulnerability from cvelistv5 – Published: 2026-10-19 12:30 – Updated: 2026-10-19 12:30
VLAI
EPSS
VEX
Title
satya-vinay Events-Management-System Registration-Edit doedit.php mysqli_query sql injection
Summary
A vulnerability was determined in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. Affected is the function mysqli_query of the file doedit.php of the component Registration-Edit Handler. This manipulation of the argument id/name/title/year/gender/fromdate/todate/people causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The project was informed of the problem early through an issue report but has not responded yet.
Severity
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/422246 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/422246/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-112141 | third-party-advisory |
| https://vuldb.com/submit/1013207 | third-party-advisory |
| https://github.com/satya-vinay/Events-Management-… | exploitissue-tracking |
| https://github.com/satya-vinay/Events-Management-… | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| satya-vinay | Events-Management-System |
Affected:
437c77ceb69bf9fe2e3f4f46f7871b83f425383a
cpe:2.3:a:satya-vinay:events-management-system:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:satya-vinay:events-management-system:*:*:*:*:*:*:*:*"
],
"modules": [
"Registration-Edit Handler"
],
"product": "Events-Management-System",
"vendor": "satya-vinay",
"versions": [
{
"status": "affected",
"version": "437c77ceb69bf9fe2e3f4f46f7871b83f425383a"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "xbjds (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was determined in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. Affected is the function mysqli_query of the file doedit.php of the component Registration-Edit Handler. This manipulation of the argument id/name/title/year/gender/fromdate/todate/people causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 7.5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "SQL Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-74",
"description": "Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-19T12:30:13.033Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-422246 | satya-vinay Events-Management-System Registration-Edit doedit.php mysqli_query sql injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/422246"
},
{
"name": "VDB-422246 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/422246/cti"
},
{
"name": "CVE-2026-112141 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-112141"
},
{
"name": "Submit #1013207 | satya-vinay Events-Management-System 437c77ceb69bf9fe2e3f4f46f7871b83f425383a SQL Injection",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/1013207"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/satya-vinay/Events-Management-System/issues/2"
},
{
"tags": [
"product"
],
"url": "https://github.com/satya-vinay/Events-Management-System/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-10-19T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-10-19T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-10-19T07:27:57.000Z",
"value": "VulDB entry last update"
}
],
"title": "satya-vinay Events-Management-System Registration-Edit doedit.php mysqli_query sql injection",
"x_generator": [
"VulDB PVTS v202610"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-112141",
"datePublished": "2026-10-19T12:30:13.033Z",
"dateReserved": "2026-10-19T05:22:28.785Z",
"dateUpdated": "2026-10-19T12:30:13.033Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}