CVE-2026-116060

Name of the Vulnerable Software and Affected Versions SourceCodester Performance Indicator System version 1.0

Description A remote SQL injection is possible due to improper handling of the Contact argument within the '/opils/staff/adddealer.php' endpoint. SQL injection is a technique where an attacker inserts malicious SQL code into a query, allowing them to manipulate the database.

Recommendations Update SourceCodester Performance Indicator System to a version newer than 1.0. As a temporary workaround, restrict access to the '/opils/staff/adddealer.php' endpoint or avoid using the Contact argument until a patch is applied.