CVE-2026-112089

11th percentile - higher than 11% of all known CVEs

A security vulnerability has been detected in Dav-ee dairy-management-system in the mysqli_query function of the employees/delete.php file. Manipulation of the e_payroll_no argument leads to SQL injection, and the attack can be initiated remotely. The exploit has been publicly disclosed and may be used; the project has not yet responded to the report.

A remote attacker can execute arbitrary SQL queries, potentially leading to leakage, modification, or deletion of employee data. The public availability of the exploit increases the risk of rapid exploitation.

Apply a fix or mitigation from the project, and until then restrict access to the application. Verify data integrity and monitor logs for suspicious queries.