CVE-2026-14795: CodeAstro Apartment Visitor Management System action-visitor.php sql injection
A vulnerability has been found in CodeAstro Apartment Visitor Management System 1.0. Affected by this issue is some unknown functionality of the file /apartment-visitor/action-visitor.php. Such manipulation of the argument remark leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-14795?
CVE-2026-14795 has a medium severity rating of 6.3.
How do I fix CVE-2026-14795?
To fix CVE-2026-14795, sanitize all user inputs and implement prepared statements for SQL queries in the action-visitor.php file.
What type of vulnerability is CVE-2026-14795?
CVE-2026-14795 is classified as an SQL Injection vulnerability.
Can CVE-2026-14795 be exploited remotely?
Yes, CVE-2026-14795 can be exploited remotely through manipulations of the argument remark.
Which software is affected by CVE-2026-14795?
CVE-2026-14795 affects CodeAstro Apartment Visitor Management System version 1.0.