CVE-2026-71207

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-71207", "assignerOrgId": "309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c", "state": "PUBLISHED", "assignerShortName": "TuranSec", "dateReserved": "2026-08-05T06:56:15.799Z", "datePublished": "2026-08-05T06:59:10.082Z", "dateUpdated": "2026-08-10T11:45:09.334Z"}, "containers": {"cna": {"title": "Stock-Inventory-Management-System - Unauthenticated SQL Injection and Hardcoded Credentials in login.php Enable Full Authentication Bypass", "descriptions": [{"lang": "en", "value": "The Stock-Inventory-Management-System application's login.php assigns raw username/password values to and builds its authentication query by directly concatenating those session values into a SQL statement with no parameterization or escaping. The same script additionally contains hardcoded administrative credentials (admin/neola) in a post-login conditional check, providing a second, independent full-authentication-bypass path.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>The Stock-Inventory-Management-System application's login.php assigns raw username/password values to and builds its authentication query by directly concatenating those session values into a SQL statement with no parameterization or escaping. The same script additionally contains hardcoded administrative credentials (admin/neola) in a post-login conditional check, providing a second, independent full-authentication-bypass path.</p>"}]}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-89 SQL Injection", "cweId": "CWE-89", "type": "CWE"}]}], "affected": [{"vendor": "mrswapnilsahu", "product": "Stock-Inventory-Management-System", "programFiles": ["login.php"], "versions": [{"version": "0", "lessThanOrEqual": "1.0", "versionType": "custom", "status": "affected"}], "defaultStatus": "unknown"}], "metrics": [{"other": {"type": "CVSS_3.1_severity", "content": {"value": "CRITICAL"}}}, {"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH"}}], "references": [{"url": "https://github.com/mrswapnilsahu/Stock-Inventory-Management-System/blob/master/login.php", "tags": ["third-party-advisory"]}], "credits": [{"lang": "en", "value": "Behruzbek Zokiraliyev", "type": "finder"}], "providerMetadata": {"orgId": "309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c", "shortName": "TuranSec", "dateUpdated": "2026-08-10T11:45:09.334Z"}, "source": {"discovery": "EXTERNAL"}, "datePublic": "2026-08-05T06:59:10.082Z"}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-08-05T13:28:24.938089Z", "id": "CVE-2026-71207", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-05T13:28:36.180Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-71207", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-08-05T13:28:24.938089Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-05T13:28:28.423Z"}}], "cna": {"title": "Stock-Inventory-Management-System - Unauthenticated SQL Injection and Hardcoded Credentials in login.php Enable Full Authentication Bypass", "source": {"discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "value": "Behruzbek Zokiraliyev"}], "metrics": [{"other": {"type": "CVSS_3.1_severity", "content": {"value": "CRITICAL"}}}, {"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "mrswapnilsahu", "product": "Stock-Inventory-Management-System", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "1.0"}], "programFiles": ["login.php"], "defaultStatus": "unknown"}], "datePublic": "2026-08-05T06:59:10.082Z", "references": [{"url": "https://github.com/mrswapnilsahu/Stock-Inventory-Management-System/blob/master/login.php", "tags": ["third-party-advisory"]}], "descriptions": [{"lang": "en", "value": "The Stock-Inventory-Management-System application's login.php assigns raw username/password values to and builds its authentication query by directly concatenating those session values into a SQL statement with no parameterization or escaping. The same script additionally contains hardcoded administrative credentials (admin/neola) in a post-login conditional check, providing a second, independent full-authentication-bypass path.", "supportingMedia": [{"type": "text/html", "value": "<p>The Stock-Inventory-Management-System application's login.php assigns raw username/password values to and builds its authentication query by directly concatenating those session values into a SQL statement with no parameterization or escaping. The same script additionally contains hardcoded administrative credentials (admin/neola) in a post-login conditional check, providing a second, independent full-authentication-bypass path.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-89", "description": "CWE-89 SQL Injection"}]}], "providerMetadata": {"orgId": "309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c", "shortName": "TuranSec", "dateUpdated": "2026-08-10T11:45:09.334Z"}}}, "cveMetadata": {"cveId": "CVE-2026-71207", "state": "PUBLISHED", "dateUpdated": "2026-08-10T11:45:09.334Z", "dateReserved": "2026-08-05T06:56:15.799Z", "assignerOrgId": "309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c", "datePublished": "2026-08-05T06:59:10.082Z", "assignerShortName": "TuranSec"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unknown", "product": "Stock-Inventory-Management-System", "programFiles": ["login.php"], "vendor": "mrswapnilsahu", "versions": [{"lessThanOrEqual": "1.0", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Stock-Inventory-Management-System application's login.php assigns raw username/password values to and builds its authentication query by directly concatenating those session values into a SQL statement with no parameterization or escaping. The same script additionally contains hardcoded administrative credentials (admin/neola) in a post-login conditional check, providing a second, independent full-authentication-bypass path."}, {"lang": "es", "value": "El archivo login.php de la aplicaci\u00f3n Stock-Inventory-Management-System asigna los valores brutos de nombre de usuario/contrase\u00f1a de $_POST a $_SESSION y construye su consulta de autenticaci\u00f3n concatenando directamente esos valores de sesi\u00f3n en una declaraci\u00f3n SQL sin parametrizaci\u00f3n ni escape. Un atacante remoto no autenticado puede enviar una carga \u00fatil como \u2019 OR \u20191\u2019=\u20191 en el formulario de inicio de sesi\u00f3n para eludir la autenticaci\u00f3n por completo. El mismo script contiene adicionalmente credenciales administrativas codificadas (admin/neola) en una verificaci\u00f3n condicional posterior al inicio de sesi\u00f3n, proporcionando una segunda ruta independiente de elusi\u00f3n completa de la autenticaci\u00f3n."}], "id": "CVE-2026-71207", "lastModified": "2026-10-24T15:10:00.190", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-71207", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-08-05T13:28:24.938089Z", "version": "2.0.3"}}]}, "published": "2026-08-05T08:16:42.717", "references": [{"source": "309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c", "url": "https://github.com/mrswapnilsahu/Stock-Inventory-Management-System/blob/master/login.php"}], "sourceIdentifier": "309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-89"}], "source": "309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,1.0]"}}], "enrichment": {"confidence": 85.0, "confidence_source": "matching", "scores": [{"score": 85.0, "source": "matching"}]}, "original": {"product": "Stock-Inventory-Management-System", "source": "cna", "vendor": "mrswapnilsahu"}, "product": "stock_management_system", "vendor": "swapnilsahu"}], "created": "2026-08-05T09:15:04.331720+00:00", "updated": "2026-08-10T23:00:07.494791+00:00", "vendors": ["swapnilsahu", "swapnilsahu$PRODUCT$stock_management_system"]}