CVE-2026-112144Medium· 5.3▾ TwilightPoC availableA weakness has been identified in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. This affects an unknown part of the file project.sql. Executing a manipulation can lead to files or directories access…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 29.2 · likelihood 0 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Exploit / PoC code exists
A weakness has been identified in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. This affects an unknown part of the file project.sql. Executing a manipulation can lead to files or directories accessible. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The project was informed of the problem early through an issue report but has not responded yet.
Events-Management-System 437c77ceb69bf9fe2e3f4f46f7871b83f425383aRefer to the linked advisories for vendor-supplied fixes and affected version ranges.
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-112141High· 7.3satya-vinay Events-Management-System Registration-Edit doedit.php mysqli_query sql injection
CVE-2026-112142High· 7.3satya-vinay Events-Management-System Registration-Delete dodelete.php sql injection
CVE-2026-112143High· 7.3satya-vinay Events-Management-System missing authentication
CVE-2025-15153Low· 3.7A weakness has been identified in PbootCMS up to 3.2.12
CVE-2026-108938Medium· 5.3A flaw has been found in code-projects Matrimonial System 1.0
CVE-2026-78051Medium· 5.3A vulnerability was determined in alexta69 MeTube up to 2026.06.10