Ghostwire

CVE-2026-37749: A SQL injection vulnerability in CodeAstro Simple Attendance Management System v1.0 allows remote unauthenticated...

CRITICAL CVSS 9.5 Exploit Available 1 PoC

Published: April 17, 2026 | Last Modified: April 17, 2026

Description

A SQL injection vulnerability in CodeAstro Simple Attendance Management System v1.0 allows remote unauthenticated attackers to bypass authentication via the username parameter in index.php.

Ghostwire Analysis — What This Means Practically

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

Proof-of-Concept Exploits (1)

Security Coverage (2 articles)

References