HIGHCVSS v3.1 7.3Vulnerability

CVE-2026-112142

A vulnerability was identified in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. Affected by this vulnerability is an unknown functionality of the file dodelete.php of the component Registration-Delete Handler. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The project was informed of the problem early through an issue report but has not responded yet.

Properties

Severity
HIGH
Nvd fetched at
2026-10-20T21:14:08.448323+00:00
Epss score
0.00263
Cvss severity
HIGH
Cvss score
7.3
Retrieved at
2026-10-21T01:24:48+00:00
Last source
FIRST EPSS
Score
7.3
Cvss version
3.1
Cve id
CVE-2026-112142
Cvss vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
First seen by Signal
2026-10-19T15:10:32+00:00
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Published at
2026-10-19T13:16:57.303
Last modified
2026-10-19T19:17:25.783
Epss percentile
0.1706

Related Entities (2)

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-112142 (CVSS v3.1 7.3) — Ninja Signal Threat Intelligence | Ninja Signal