PT-2026-141171

CVE-2026-125074

·

Published

2026-11-09

·

Updated

2026-11-09

Description by

CVSS 2.0
7.5
High
MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
A flaw has been found in SourceCodester Smart Attendance System with QR Code Scanner 1.0. This affects an unknown function of the file reset password.php of the component Password Reset. This manipulation of the argument username/password causes weak password recovery. The attack is possible to be carried out remotely. The exploit has been published and may be used.
Exploitability
Exploit
Fix
Researchers
Vendors
Affected products
Weakness enumeration
CWE-640: Weak Password Recovery Mechanism for Forgotten Password
Related identifiers
CVE-2026-125074
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com