SQL Injection Vulnerability in Neethuharii CafeManagement Login Handler

CVE-2026-96514

What is CVE-2026-96514?

A vulnerability exists in the Neethuharii CafeManagement system's Login Handler due to insecure handling of user input in the CafePortalLogin.php file. An attacker can exploit this weakness through a crafted input that manipulates the 'uname' argument, leading to unauthorized access and potential data compromise. With the ability for remote attack execution and the exploit already publicized, users of Neethuharii CafeManagement are strongly advised to review their security measures. The vendor has been notified but has not provided any updates regarding patches or fixes.

References