CVE-2026-19787

Name of the Vulnerable Software and Affected Versions SourceCodester Air Cargo Management System version 1.0

Description A remote SQL injection is possible due to improper handling of the ID argument within the /classes/Master.php?f=save cargo type endpoint. SQL injection is a technique where an attacker inserts malicious SQL code into a query, allowing them to manipulate the database.

Recommendations Update SourceCodester Air Cargo Management System to a version newer than 1.0. As a temporary workaround, restrict access to the /classes/Master.php?f=save cargo type endpoint to minimize the risk of exploitation.