CVE-2026-14735

HighCVSS 7.3

Published: 05/07/2026(UTC)Updated: 07/07/2026(UTC)Translated: 08/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.41%

33th percentile - higher than 33% of all known CVEs

Summary

A SQL injection vulnerability has been found in Smart Parking System 1.0 in the file /parkings/parkings.php. An unknown function allows manipulation of the street/city/status arguments, enabling remote SQL injection. The exploit has been publicly disclosed.

Risk Assessment

An attacker can remotely execute arbitrary SQL queries, leading to data leakage, modification, or deletion, and potentially full system compromise.

Recommendation

Immediately update the system to the latest version or apply a security patch. Also implement input validation and parameterized SQL queries.

Other vulnerabilities in Smart Parking System

CVE-2026-10243High
Smart Parking System 1.0 by code-projects has a vulnerability in admin endpoints allowing remote access without authentication. Exploit details are publicly available.

Original NVD description (English source)

A vulnerability has been found in code-projects Smart Parking System 1.0. The affected element is an unknown function of the file /parkings/parkings.php. Such manipulation of the argument street/city/status leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.