CVE-2026-4615

5.5 mediumEPSS 0.3%

Medium (5.5). EPSS 0.3% chance of exploitation in the next 30 days.

A vulnerability was identified in SourceCodester Online Catering Reservation 1.0. Impacted is an unknown function of the file /search.php. Such manipulation of the argument rcode leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used.

Severity

CVSS 4.0

5.5 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

CVSS 3.1

7.3 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 26% of CVEs (scores of 2026-11-01)
CWEs: CWE-74, CWE-89
Published: 2026-03-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://github.com/WHOAMI-xiaoyu/CVE/blob/main/CVE_5.md
https://vuldb.com/?ctiid.352479
https://vuldb.com/?id.352479
https://vuldb.com/?submit.775735
https://www.sourcecodester.com/

Check your stack JSON