CVE-2026-77392

MediumCVSS 6.3

Published: 21/08/2026(UTC)Updated: 24/08/2026(UTC)Translated: 21/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.25%

16th percentile - higher than 16% of all known CVEs

Summary

A weakness has been identified in SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP 1.0. This impacts the function saveUser of the file /public/submit.php. Manipulation of the argument Researcher causes SQL injection. The attack may be initiated remotely. The exploit has been made public and could be used for attacks.

Risk Assessment

Risk of remote SQL injection, which may lead to unauthorized database access, data theft, or system integrity compromise.

Recommendation

Update or secure the SourceCodester Dynamic Input Field Generator application by using parameterized queries and input validation.

Other vulnerabilities in SourceCodester Dynamic Input Field Generator

CVE-2026-77391Medium
A security flaw has been discovered in SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP 1.0, allowing cross-site request forgery. The attack can be launched remotely, and the exploit has been publicly released.

Original NVD description (English source)

A weakness has been identified in SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP 1.0. This impacts the function saveUser of the file /public/submit.php. This manipulation of the argument Researcher causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks.