{"id":"CVE-2026-78143","state":"PUBLISHED","title":"code-projects Barangay Resident Profiling Management System Resident Search Functionality residents.php sql injection","description":"A vulnerability was determined in code-projects Barangay Resident Profiling Management System 1.0. Affected is an unknown function of the file residents.php of the component Resident Search Functionality. This manipulation of the argument Search causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.","publishedAt":"2026-08-23T22:15:09.608Z","updatedAt":"2026-08-24T17:51:36.192Z","severity":{"score":6.9,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","source":"VulDB"},"assigner":"VulDB","products":["code-projects Barangay Resident Profiling Management System"],"affected":[{"vendor":"code-projects","product":"Barangay Resident Profiling Management System","versions":[{"version":"1.0","status":"affected"}],"cpes":["cpe:2.3:a:code-projects:barangay_resident_profiling_management_system:*:*:*:*:*:*:*:*"],"modules":["Resident Search Functionality"]}],"references":["https://vuldb.com/vuln/394526","https://vuldb.com/vuln/394526/cti","https://vuldb.com/cve/CVE-2026-78143","https://vuldb.com/submit/882424","https://gist.github.com/c4ttr4ck/504e89cacf12c7d6a87490f3859dfded","https://code-projects.org/"],"weaknesses":["CWE-89","CWE-74"],"ingestedAt":"2026-10-29T20:13:07.220Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/78xxx/CVE-2026-78143.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-78143","state":"PUBLISHED","datePublished":"2026-08-23T22:15:09.608Z","dateUpdated":"2026-08-24T17:51:36.192Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2026-08-23T06:08:32.464Z"},"containers":{"cna":{"title":"code-projects Barangay Resident Profiling Management System Resident Search Functionality residents.php sql injection","descriptions":[{"lang":"en","value":"A vulnerability was determined in code-projects Barangay Resident Profiling Management System 1.0. Affected is an unknown function of the file residents.php of the component Resident Search Functionality. This manipulation of the argument Search causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized."}],"affected":[{"vendor":"code-projects","product":"Barangay Resident Profiling Management System","versions":[{"version":"1.0","status":"affected"}],"cpes":["cpe:2.3:a:code-projects:barangay_resident_profiling_management_system:*:*:*:*:*:*:*:*"],"modules":["Resident Search Functionality"]}],"references":[{"url":"https://vuldb.com/vuln/394526","name":"VDB-394526 | code-projects Barangay Resident Profiling Management System Resident Search Functionality residents.php sql injection","tags":["vdb-entry","technical-description"]},{"url":"https://vuldb.com/vuln/394526/cti","name":"VDB-394526 | CTI Indicators (IOB, IOC, TTP, IOA)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/cve/CVE-2026-78143","name":"CVE-2026-78143 | CVE Analysis and Report","tags":["third-party-advisory"]},{"url":"https://vuldb.com/submit/882424","name":"Submit #882424 | code-projects Barangay Resident Profiling Management System (BRPMS) / Barangay San Fabian 1.0 SQL Injection","tags":["third-party-advisory"]},{"url":"https://gist.github.com/c4ttr4ck/504e89cacf12c7d6a87490f3859dfded","tags":["exploit"]},{"url":"https://code-projects.org/","tags":["product"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":7.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","baseSeverity":"HIGH"}},{"cvssV3_0":{"version":"3.0","baseScore":7.3,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","baseSeverity":"HIGH"}},{"cvssV2_0":{"version":"2.0","baseScore":7.5,"vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-89","type":"CWE","lang":"en","description":"SQL Injection"}]},{"descriptions":[{"cweId":"CWE-74","type":"CWE","lang":"en","description":"Injection"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2026-08-23T22:15:09.608Z"},"timeline":[{"time":"2026-08-23T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2026-08-23T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2026-08-23T08:13:47.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"c4ttr4ck (VulDB User)","type":"reporter"}],"tags":["x_freeware"],"x_generator":["VulDB PVTS v202608"]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-08-24T17:49:34.393987Z","id":"CVE-2026-78143","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-08-24T17:51:36.192Z"}}]}}}