CVE-2026-19787
MediumCVSS 4.7Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
A vulnerability was determined in SourceCodester Air Cargo Management System 1.0 in the file /classes/Master.php?f=save_cargo_type. Executing a manipulation of the argument ID can lead to SQL injection. The attack can be executed remotely, and the exploit has been publicly disclosed.
Risk Assessment
A remote attacker can exploit SQL injection to gain unauthorized access to the database, steal data, modify data, or escalate privileges within the system.
Recommendation
Update the system to a patched version if available. If not, restrict access to Master.php and apply input validation for the ID argument.
Original NVD description (English source)
A vulnerability was determined in SourceCodester Air Cargo Management System 1.0. Impacted is an unknown function of the file /classes/Master.php?f=save_cargo_type. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.