CVE-2026-112150

{
  "etk_id": "ETK-2026-2091",
  "cve_id": "CVE-2026-112150",
  "display_id": "CVE-2026-112150",
  "ghsa_id": "GHSA-66hj-rrx7-m6pr",
  "euvd_id": "EUVD-2026-104387",
  "status": "published",
  "anchor_state": "anchored",
  "title": "SQL injection in Criminal-Management-System search",
  "summary": "Criminal-Management-System revisions through 2808d057e7ddc5295519a487365b0cacfd0ba8c4 are affected by SQL injection in the Search input processed by search.php. An unauthenticated remote attacker who can reach that endpoint may manipulate database queries, potentially exposing or altering data.",
  "mitigation": "Restrict or disable external access to search.php until the input handling is corrected, and ensure its database account has only the permissions required. No fixed version is recorded; review upstream changes before re-enabling the endpoint.",
  "vendor": "vraj404",
  "product": "Criminal Management System",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        "2808d057e7ddc5295519a487365b0cacfd0ba8c4"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "Criminal-Management-System",
      "purl": null
    }
  ],
  "cwes": null,
  "cvss_score": 7.3,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
  "epss_score": 0.0026,
  "epss_percentile": 0.1706,
  "epss_asof": "2026-10-20",
  "automation": "deterministic",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 12.609532516666667,
  "t0_at": "2026-10-19T14:45:18.145000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-10-19T14:45:18.145000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-19T14:45:18.145000+00:00",
      "url": "https://github.com/advisories/GHSA-66hj-rrx7-m6pr"
    }
  }
}