Live › vulnerability › CVE-2026-116048
Go to dashboardUnauthenticated SQL injection in the registration form (source/registerform1.php) of the abandoned krupalshah EmployeeRecruitmentSystem PHP app. A public exploit exists; no patch will come. VulDB rates it CVSS 4.0 5.5.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-25 08:39 UTC. All times on this page are UTC.
Anyone running this EmployeeRecruitmentSystem code with the registration form reachable over the network is exposed, since the flaw is in the public registration path and needs no account. The sources say the project is rolling release with no version details and the maintainer no longer supports it, so there is no vendor patch to apply. Teams that do not run this repository can skip it.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| EmployeeRecruitmentSystem | github | <= 922ff6d208278282e7c8e36d70d9ae356adec9fe | – |
no longer maintained)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability was detected in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this vulnerability is the function mysql_query of the file /source/registerform1.php of the component Registration. Performing a manipulation of the argument firstname/middlename/lastname/gender/birthdate/state/statespecify/city/cityspecify results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.
This page as .md · .json · in your agent: get_signal("CVE-2026-116048")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.