Medium severity4.7NVD Advisory· Published Mar 8, 2026· Updated Apr 29, 2026
CVE-2026-3751
CVE-2026-3751
Description
A vulnerability was detected in SourceCodester Employee Task Management System 1.0. Impacted is an unknown function of the file /daily-attendance-report.php of the component GET Parameter Handler. The manipulation of the argument Date results in sql injection. The attack may be performed from remote. The exploit is now public and may be used.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:oretnom23:employee_task_management_system:1.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:oretnom23:employee_task_management_system:1.0:*:*:*:*:*:*:*
- (no CPE)range: =1.0
Patches
Vulnerability mechanics
References
5- github.com/meifukun/Web-Security-PoCs/blob/main/Employee-Task-Management-System/SQLi-DailyAttendanceReport-date.mdnvdExploitThird Party Advisory
- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdPermissions RequiredVDB Entry
- www.sourcecodester.comnvdProduct
News mentions
0No linked articles in our index yet.