CVE-2026-78143
code-projects Barangay Resident Profiling Management System Resident Search Functionality residents.php sql injection
- State
- Published
- Severity
- 6.9 Medium
- Published
- Aug 23, 2026
- Updated
- Aug 24, 2026
- Reserved
- Aug 23, 2026
Description
A vulnerability was determined in code-projects Barangay Resident Profiling Management System 1.0. Affected is an unknown function of the file residents.php of the component Resident Search Functionality. This manipulation of the argument Search causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 6.9 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P | VulDB |
| 3.1 | 7.3 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R | VulDB |
| 3.0 | 7.3 High | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R | VulDB |
| 2.0 | 7.5 High | AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR | VulDB |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
Barangay Resident Profiling Management Systemcode-projects |
|
References
- VDB-394526 | code-projects Barangay Resident Profiling Management System Resident Search Functionality residents.php sql injectionvdb-entrytechnical-description
- VDB-394526 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions-required
- CVE-2026-78143 | CVE Analysis and Reportthird-party-advisory
- Submit #882424 | code-projects Barangay Resident Profiling Management System (BRPMS) / Barangay San Fabian 1.0 SQL Injectionthird-party-advisory
- https://gist.github.com/c4ttr4ck/504e89cacf12c7d6a87490f3859dfdedexploit
- https://code-projects.org/product
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.