CVE-2026-19787 - SourceCodester Air Cargo Management System Master.php save_cargo_type sql injection

Back Back to CVE browser

MEDIUM

SourceCodester Air Cargo Management System Master.php save_cargo_type sql injection

Published Aug 14, 2026

5.1

MEDIUM

CVSS 4.0

EPSS 0.35%

Description

A vulnerability was determined in SourceCodester Air Cargo Management System 1.0. Impacted is an unknown function of the file /classes/Master.php?f=save_cargo_type. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.

Affected products

Vendor SourceCodester Product Air Cargo Management System Default
n/a
- Version
  1.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

SourceCodester

Air Cargo Management System

n/a

Version	Status	Constraints
1.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-74

CWE-89

SQL Injection

References (7)

https://github.com/XijieBa/CVE/issues/2
exploitissue-tracking
https://vuldb.com/cve/CVE-2026-19787
third-party-advisory
https://vuldb.com/submit/869411
third-party-advisory
https://vuldb.com/submit/869455
third-party-advisory
https://vuldb.com/vuln/389747
vdb-entrytechnical-description
https://vuldb.com/vuln/389747/cti
signaturepermissions-required
https://www.sourcecodester.com/
product

Link	Providers	Tags
https://github.com/XijieBa/CVE/issues/2		exploitissue-tracking
https://vuldb.com/cve/CVE-2026-19787		third-party-advisory
https://vuldb.com/submit/869411		third-party-advisory
https://vuldb.com/submit/869455		third-party-advisory
https://vuldb.com/vuln/389747		vdb-entrytechnical-description
https://vuldb.com/vuln/389747/cti		signaturepermissions-required
https://www.sourcecodester.com/		product