SQL Injection in SourceCodester Storage Unit Rental Management System
CVE-2026-37589

2.7LOW

Key Information:

Vendor: SourceCodester
Status: Storage Unit Rental Management System
Vendor: CVE Published:; 14 April 2026

🔔 Create SourceCodester Vulnerability Alert

What is CVE-2026-37589?

The Storage Unit Rental Management System v1.0 by SourceCodester has a vulnerability in the manage_storage_unit.php file, which allows for SQL injection attacks. This occurs when the application's input validation fails, enabling attackers to manipulate database queries. Exploiting this vulnerability could lead to unauthorized access to sensitive data or the execution of harmful SQL commands.

References

https://github.com/shininadd/cve_report/blob/main/sourcec...

CVSS V3.1

Score:

2.7

Severity:

LOW

Confidentiality:

Low

Integrity:

None

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

High

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Apr 14, 2026
Vulnerability Reserved
Apr 6, 2026

CVE-2026-37589 Data

JSON