CVE-2026-116050

{
  "etk_id": "ETK-2026-2592",
  "cve_id": "CVE-2026-116050",
  "display_id": "CVE-2026-116050",
  "ghsa_id": "GHSA-3g28-455r-c73m",
  "euvd_id": "EUVD-2026-109378",
  "status": "published",
  "anchor_state": "anchored",
  "title": "SQL injection in Employee Recruitment System registration",
  "summary": "Employee Recruitment System deployments through commit 922ff6d208278282e7c8e36d70d9ae356adec9fe are affected in the registration handler. A remote attacker who can reach the registration function may alter database queries through the email-related input.",
  "mitigation": "Replace or retire the unsupported application, since no fixed release is identified. Until it is removed, disable public registration or restrict it to trusted networks and update the affected database access to use parameterized queries.",
  "vendor": "krupalshah",
  "product": "Employee Recruitment System",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        "922ff6d208278282e7c8e36d70d9ae356adec9fe"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "Employee Recruitment System",
      "purl": null
    }
  ],
  "cwes": null,
  "cvss_score": 7.3,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "deterministic",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 11.98810415,
  "t0_at": "2026-10-25T08:45:18.342000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-10-25T08:45:18.342000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-25T08:45:18.342000+00:00",
      "url": "https://github.com/advisories/GHSA-3g28-455r-c73m"
    }
  }
}