CVE Catalog
CVE-2026-14809
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk0.44%
35th percentile - higher than 35% of all known CVEs
Summary
Prog Management System developed by PROG MIS has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents.
Risk Assessment
The risk involves unauthorized access to sensitive data stored in the database, potentially leading to data leakage and breach of system confidentiality.
Recommendation
It is recommended to immediately update the system to the latest version and implement input validation and prepared SQL statements to eliminate the SQL injection vulnerability.
Original NVD description (English source)
Prog Management System developed by PROG MIS has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents.