CVE-2026-12775

Name of the Vulnerable Software and Affected Versions Montodel House-Rental-Management versions prior to 90010017b81265eb1ef3810268909f7719a33863

Description A SQL injection issue exists in the '/login.php' endpoint. Remote attackers can exploit this by manipulating the Username parameter. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution, potentially allowing unauthorized access to the database.

Recommendations Update to a version later than 90010017b81265eb1ef3810268909f7719a33863. As a temporary workaround, restrict access to the '/login.php' endpoint or sanitize the Username parameter to minimize the risk of exploitation.