SQL Injection Vulnerability in Sourcecodester Storage Unit Rental Management System
CVE-2026-37591

2.7LOW

Key Information:

Vendor: Sourcecodester
Status: Storage Unit Rental Management System
Vendor: CVE Published:; 14 April 2026

🔔 Create Sourcecodester Vulnerability Alert

What is CVE-2026-37591?

The Sourcecodester Storage Unit Rental Management System version 1.0 is susceptible to SQL injection attacks through the file located at /storage/admin/tenants/view_details.php. This vulnerability can enable unauthorized access to the database, allowing malicious actors to execute arbitrary SQL code, potentially compromising sensitive data and the overall security of the application. It is crucial for users and administrators to apply necessary patches and implement security measures to mitigate this risk.

References

https://github.com/shininadd/cve_report/blob/main/sourcec...

CVSS V3.1

Score:

2.7

Severity:

LOW

Confidentiality:

Low

Integrity:

None

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

High

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Apr 14, 2026
Vulnerability Reserved
Apr 6, 2026

CVE-2026-37591 Data

JSON