PoC Index85,092 CVEs with PoCs

CVE-2026-3746

SourceCodester Simple Responsive Tourism Website Login Login.php sql injection

MEDIUM 5.5EPSS 0.6%

A vulnerability was determined in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /tourism/classes/Login.php?f=login of the component Login. This manipulation of the argument Username causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.

Affected
SourceCodester · Simple Responsive Tourism Website
CVSS v4.0 VULDB
5.5 MEDIUMCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS v3.1 NVD
9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v3.1 VULDB
7.3 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v2.0 VULDB
7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.61% chance of exploitation in the next 30 days, 48th percentile
Published
2026-03-08
Updated
2026-03-11

Proof-of-concept exploits (1)

Security advisories

References

Related