SourceCodester Smart Attendance System: Authentication vulnerability (CVE-2026-125075)
A vulnerability in SourceCodester Smart Attendance System with QR Code Scanner 1.0 allows for missing authentication via manipulation of the e argument in create_admin.php.
CVE search metadata
CVE search record: CVE-2026-125075. Severity: high. CVSS: 7.3. KEV: no. Product: Smart Attendance System with QR Code Scanner (1.0). Brief: SourceCodester Smart Attendance System: Authentication vulnerability (CVE-2026-125075). Brief link: https://feed.craftedsignal.io/briefs/2026-11-smart-attendance-system-auth-bypass/
Triage facts
Revision 1- Applicability
- Smart Attendance System with QR Code Scanner (1.0)
- Evidence
- Unknown
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Nov 10, 12:15 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
A vulnerability has been identified in SourceCodester Smart Attendance System with QR Code Scanner 1.0. The issue affects the getMessage function in create_admin.php within the Admin Account Creation component. Manipulation of the argument 'e' leads to missing authentication. The attack can be performed remotely, and public exploit code exists.