CVE-2026-7072 | CodePanda Source canteen_management_system 1.0 /api/login.php Username sql injection

April 26, 2026 Yanac

A vulnerability classified as critical was found in CodePanda Source canteen_management_system 1.0. Affected by this issue is some unknown functionality of the file /api/login.php. The manipulation of the argument Username results in sql injection.

This vulnerability is identified as CVE-2026-7072. The attack can be executed remotely. Additionally, an exploit exists.VulDB Recent EntriesRead More