CVE-2026-90876

HighCVSS 7.3

Published: 15/09/2026(UTC)Updated: 16/09/2026(UTC)Translated: 15/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.27%

19th percentile - higher than 19% of all known CVEs

Summary

A vulnerability has been found in SourceCodester Online Faculty Clearance System 1.0. Affected by this vulnerability is an unknown functionality of the file /delete_requirement.php. The manipulation of the argument ID leads to SQL injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Risk Assessment

The vulnerability allows a remote attacker to inject arbitrary SQL queries, potentially leading to data leakage or modification. The risk is high because the exploit is publicly available.

Recommendation

Update the software to the latest version if available. Otherwise, implement fixes to filter the ID argument and restrict access to /delete_requirement.php.

Other vulnerabilities in Online Faculty Clearance System

CVE-2026-90877High
A vulnerability was found in SourceCodester Online Faculty Clearance System 1.0. Affected by this issue is some unknown functionality of the file /update_requirement_status.php. The manipulation of the argument haydi results in SQL injection. It is possible to launch the attack remotely. The exploit has been made public and could be used.

Original NVD description (English source)

A vulnerability has been found in SourceCodester Online Faculty Clearance System 1.0. Affected by this vulnerability is an unknown functionality of the file /delete_requirement.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS