CVE-2026-5575

HighCVSS 7.3

Published: 05/04/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.27%

19th percentile - higher than 19% of all known CVEs

Summary

In SourceCodester/jkev Record Management System 1.0, the index.php file in the Login component is vulnerable to SQL injection via the Username argument. Remote exploitation is possible and the exploit is public.

Risk Assessment

An attacker can remotely bypass authentication and gain unauthorized access to the system, as well as manipulate database data.

Recommendation

Update the system immediately or apply temporary mitigations such as input validation and parameterized queries.

Other vulnerabilities in SourceCodester/jkev Record Management System

CVE-2026-5576Medium
SourceCodester/jkev Record Management System 1.0 allows unrestricted file upload via save_emp.php on the Add Employee page. Remote exploitation is possible and the exploit is public.

Original NVD description (English source)

A vulnerability was detected in SourceCodester/jkev Record Management System 1.0. Affected by this vulnerability is an unknown functionality of the file index.php of the component Login. The manipulation of the argument Username results in sql injection. The attack may be launched remotely. The exploit is now public and may be used.