---
id: CVE-2026-112144
title: satya-vinay Events-Management-System project.sql file access
summary: >-
  A weakness has been identified in satya-vinay Events-Management-System up to
  437c77ceb69bf9fe2e3f4f46f7871b83f425383a. This affects an unknown part of the
  file project.sql. Executing a manipulation can lead to files or directories
  access…
severity: medium
cvss: 5.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:C'
cvssSource: cna
cwe:
  - CWE-552
  - CWE-425
vendor: satya-vinay
product: Events-Management-System
affected:
  - Events-Management-System 437c77ceb69bf9fe2e3f4f46f7871b83f425383a
ssvc:
  exploitation: poc
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2026-10-19T14:25:16.126751Z'
exploitAvailable: true
published: '2026-10-19'
updated: '2026-10-19'
sourceUpdated: '2026-10-19T14:25:40.803Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-112144'
references:
  - url: 'https://vuldb.com/vuln/422249'
    label: VDB-422249 | satya-vinay Events-Management-System project.sql file access
  - url: 'https://vuldb.com/vuln/422249/cti'
    label: 'VDB-422249 | CTI Indicators (IOB, IOC, TTP, IOA)'
  - url: 'https://vuldb.com/cve/CVE-2026-112144'
    label: CVE-2026-112144 | CVE Analysis and Report
  - url: 'https://vuldb.com/submit/1013213'
    label: >-
      Submit #1013213 | satya-vinay Events-Management-System
      437c77ceb69bf9fe2e3f4f46f7871b83f425383a Exposure of Private Personal
      Information to an Unauthorized Acto
  - url: 'https://github.com/satya-vinay/Events-Management-System/issues/6'
  - url: 'https://github.com/satya-vinay/Events-Management-System/'
tags:
  - cve.org
  - exploit-available
ingestedAt: '2026-10-19T14:30:01.081Z'
---

## Overview

A weakness has been identified in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. This affects an unknown part of the file project.sql. Executing a manipulation can lead to files or directories accessible. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The project was informed of the problem early through an issue report but has not responded yet.

## Affected

- `Events-Management-System 437c77ceb69bf9fe2e3f4f46f7871b83f425383a`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.