SourceCodester Performance Indicator System: SQL Injection in Contact argument (CVE-2026-116060)
SourceCodester Performance Indicator System 1.0 contains an SQL injection vulnerability in the 'Contact' argument of '/opils/staff/adddealer.php', which can be triggered remotely.
CVE search metadata
CVE search record: CVE-2026-116060. Severity: high. CVSS: 7.3. KEV: no. Product: Performance Indicator System (1.0). Brief: SourceCodester Performance Indicator System: SQL Injection in Contact argument (CVE-2026-116060). Brief link: https://feed.craftedsignal.io/briefs/2026-10-sourcecodester-sqli/
Triage facts
Revision 1- Applicability
- Performance Indicator System (1.0)
- Evidence
- Unknown
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Oct 25, 20:30 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
A vulnerability has been identified in SourceCodester Performance Indicator System 1.0. The flaw exists in the '/opils/staff/adddealer.php' file. Manipulation of the 'Contact' argument can lead to SQL injection. The vulnerability can be exploited remotely, and the exploit has been publicly disclosed.