CVE-2026-112088

9th percentile - higher than 9% of all known CVEs

A weakness has been identified in Dav-ee dairy-management-system in the mysqli_query function of the farmers/add.php file. Manipulation of the f_no/f_id/f_name/f_locallity/f_ac/f_phone arguments can lead to SQL injection, and the attack can be launched remotely. The exploit is publicly available, and the product does not use versioning, so version information is unavailable.

A remote attacker can inject malicious SQL queries, potentially resulting in unauthorized access to or modification of farmer data. The public availability of the exploit increases the attack risk.

Deploy a fix or mitigation from the vendor, and until then restrict access to the application. Monitor database logs for unusual queries.