Unrated severityNVD Advisory· Published Nov 9, 2026
SourceCodester Smart Attendance System with QR Code Scanner Password Reset reset_password.php password recovery
CVE-2026-125074
Description
A flaw has been found in SourceCodester Smart Attendance System with QR Code Scanner 1.0. This affects an unknown function of the file reset_password.php of the component Password Reset. This manipulation of the argument username/password causes weak password recovery. The attack is possible to be carried out remotely. The exploit has been published and may be used.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: 1.0
Patches
Vulnerability mechanics
References
6- github.com/yuechuya/sourcecodester-vuln-reports/blob/main/reports/VULN-01-Unauthenticated-Password-Reset.mdmitreexploit
- vuldb.com/cve/CVE-2026-125074mitrethird-party-advisory
- vuldb.com/submit/1041011mitrethird-party-advisory
- vuldb.com/vuln/433178mitrevdb-entrytechnical-description
- vuldb.com/vuln/433178/ctimitresignaturepermissions-required
- www.sourcecodester.commitreproduct
News mentions
0No linked articles in our index yet.