← Database

CVE-2026-36236

CRITICAL CVSS: 9.8 Published: 2026-04-10 Modified: 2026-06-17

Description

SourceCodester Engineers Online Portal v1.0 is vulnerable to SQL Injection in update_password.php via the new_password parameter.

Affected Platforms

Janobe Engineers Online Portal

Weakness Type

CWE-89

References