CVE-2026-19787

2.0 lowEPSS 0.3%

A vulnerability was determined in SourceCodester Air Cargo Management System 1.0. Impacted is an unknown function of the file /classes/Master.php?f=save_cargo_type. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.

Severity

CVSS 4.0

2.0 low

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

CVSS 3.1

4.7 medium

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 28% of CVEs (scores of 2026-10-31)
CWEs: CWE-74, CWE-89
Published: 2026-08-14
Modified: 2026-08-14
Record from: the NVD, synced 2026-10-19

References

https://github.com/XijieBa/CVE/issues/2
https://vuldb.com/cve/CVE-2026-19787
https://vuldb.com/submit/869411
https://vuldb.com/submit/869455
https://vuldb.com/vuln/389747

Check your stack JSON