MidnightBSD

Advisories for jon-remus-sevellejo

CVE-2026-26699

sourcecodester Personnel Property Equipment System v1.0 is vulnerable to arbitrary code execution in ip/ppes/admin/admin_change_picture.php.

CVSS 3.x

Source Score Severity Vector Exploitability Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0 8.8 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 2.8 5.9

Products Affected

Vendor Product Version
jon-remus-sevellejo personnel_property_equipment_system 1.0
CVE-2026-26700

sourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/edit_employee.php.

Products Affected

Vendor Product Version
jon-remus-sevellejo personnel_property_equipment_system 1.0
CVE-2026-26701

sourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/edit_tecnical_user.php.

Products Affected

Vendor Product Version
jon-remus-sevellejo personnel_property_equipment_system 1.0
CVE-2026-26702

sourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/myitem_reuse.php.

Products Affected

Vendor Product Version
jon-remus-sevellejo personnel_property_equipment_system 1.0
CVE-2026-26703

sourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/advance_search.php.

Products Affected

Vendor Product Version
jon-remus-sevellejo personnel_property_equipment_system 1.0