Insurance-Management-System (Rolling Release) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/insurance-management-system-rolling-release/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 21 Oct 2026 13:18:46 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgInsurance-Management-System: SQL injection in editPlan.php (CVE-2026-114242)https://feed.craftedsignal.io/briefs/2026-10-insurance-management-sql-injection/Wed, 21 Oct 2026 13:18:46 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-insurance-management-sql-injection/A SQL injection vulnerability exists in the Insurance-Management-System project due to manipulation of the Plan_no/Name argument in /Admin/View/editPlan.php.A vulnerability was identified in dhikshitha29 Insurance-Management-System (commit 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913a5096bb58dd837). The function mysqli_query in /Admin/View/editPlan.php is susceptible to SQL injection via the Plan_no or Name argument. The attack can be executed remotely, and a public exploit is available. The project uses a rolling release model, and no fix has been provided by the maintainer.

]]>highadvisory