CVE-2026-19825
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk34th percentile - higher than 34% of all known CVEs
Summary
In SourceCodester Simple Client Management System 1.0, a SQL injection vulnerability exists in an unknown function of the file /classes/Master.php?f=save_service. Manipulation of the argument ID leads to SQL injection. The attack can be performed remotely. The exploit has been publicly disclosed and may be used.
Risk Assessment
A remote attacker can exploit the vulnerability to manipulate the database, potentially leading to data theft, data integrity compromise, or full system takeover. The public exploit increases the risk of attacks.
Recommendation
Upgrade SourceCodester Simple Client Management System to a patched version or apply mitigations such as parameterized SQL queries. Also restrict access to the application.
Original NVD description (English source)
A security vulnerability has been detected in SourceCodester Simple Client Management System 1.0. The impacted element is an unknown function of the file /classes/Master.php?f=save_service. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.