HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-6153 — A vulnerability was identified in code-projects Vehicle Showroom Management Syst...

·Source: NIST NVD

Updated:

Executive Summary

A vulnerability was identified in code-projects Vehicle Showroom Management System 1.0. Impacted is an unknown function of the file /util/StaffDetailsFunction.php. Such manipulation of the argument STAFF_ID leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used.

Analysis

A vulnerability was identified in code-projects Vehicle Showroom Management System 1.0. Impacted is an unknown function of the file /util/StaffDetailsFunction.php. Such manipulation of the argument STAFF_ID leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used. CVSS Score: 7.3. Published: 2026-04-13T04:16:13.403.

Indicators of Compromise (1)

CVE (1)
CVE-2026-6153
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Apr 13, 2026. Verified by: NIST.

Related Threats

LOWVulnerability

Issue in the Linux kernel virtio-net/TAP networking path affecting KVM-based hypervisors

<p><b>Bulletin ID:</b> 2026-137-AWS <br> <b>Scope:</b> AWS <br> <b>Content Type:</b> Important (requires attention) <br> <b>Publication Date:</b> 10/15/2026 10:30 AM PDT</p> <p><b>Description:</b></p> <p>AWS is aware of an issue in the Linux kernel's virtio-net/TAP networking path (CVE-2026-99999) that affects KVM-based hypervisors running unpatched Linux kernel versions 4.4 through 6.18. This iss

CVE-2026-99999
AWS Security Bulletins
MEDIUMVulnerability

Cryptohack Roundup: Ledger Halts Sales Amid $86M Theft Probe

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/cryptohack-roundup-ledger-halts-sales-amid-86m-theft-probe-image_small-9-a-33114.jpg" align=right hspace=4><b>Also: UK Sanctions Crypto Exchanges Over Russian Sanctions Evasion</b><br>This week, Ledger halted wallet sales across Asia, the United Kingdom sanctioned a crypto exchange for evading sanctions on Russia, hackers deployed

Bank Info Security
MEDIUMVulnerability

ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More

Someone built a tool to steal data, then decided it should scare the victim for fun. Yes, that’s an actual feature. And somehow, it fits right in with this week's security stories. The rest gets interesting in different ways. A small permission can lead to a big theft. A trusted login can hide the wrong person. Old bugs are finding new victims, familiar tools are being put to strange uses, and

The Hacker News