SQL Injection Vulnerability in SourceCodester Vehicle Parking Area Management System
CVE-2026-37345

9.8CRITICAL

Key Information:

Vendor

SourceCodester
Status
Vehicle Parking Area Management System
Vendor
CVE Published:
16 April 2026

What is CVE-2026-37345?

The Vehicle Parking Area Management System by SourceCodester is susceptible to an SQL Injection flaw located in the manage_park.php file. This vulnerability allows an attacker to manipulate SQL queries by injecting arbitrary SQL code, potentially leading to unauthorized database access, data exfiltration, or data manipulation. Proper input validation and parameterized queries are recommended to mitigate this security risk.

References

https://github.com/mt-0505/cve-report/blob/main/sourcecod...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.