SQL Injection Vulnerability in SourceCodester Storage Unit Rental Management System
CVE-2026-37590

2.7LOW

Key Information:

Vendor: SourceCodester
Status: Storage Unit Rental Management System
Vendor: CVE Published:; 14 April 2026

🔔 Create SourceCodester Vulnerability Alert

What is CVE-2026-37590?

The SourceCodester Storage Unit Rental Management System v1.0 exhibits a vulnerability in the management of rent processing through the /storage/admin/rents/manage_rent.php file. This flaw allows attackers to execute arbitrary SQL queries, which can lead to unauthorized access to sensitive data, database manipulation, and potential data breaches. It is essential for users of this system to implement immediate security measures to safeguard their applications from exploitation.

References

https://github.com/shininadd/cve_report/blob/main/sourcec...

CVSS V3.1

Score:

2.7

Severity:

LOW

Confidentiality:

Low

Integrity:

None

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

High

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Apr 14, 2026
Vulnerability Reserved
Apr 6, 2026

CVE-2026-37590 Data

JSON