CVE-2026-112088Medium· 6.3▾ TwilightPoC availableA weakness has been identified in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. This affects the function mysqli_query of the file farmers/add.php. Executing a manipulat…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 34.7 · likelihood 0.1 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Exploit-prediction probability, daily snapshots since Oct 19.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.2%
Exploit / PoC code exists
0.2% → 0.3%
A weakness has been identified in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. This affects the function mysqli_query of the file farmers/add.php. Executing a manipulation of the argument f_no/f_id/f_name/f_locallity/f_ac/f_phone can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The vendor was contacted early about this disclosure.
dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615cdairy-management-system f31a584c3330c013b61f8b0306d9e0849c6d693dRefer to the linked advisories for vendor-supplied fixes and affected version ranges.
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-112090Medium· 6.3Dav-ee dairy-management-system pay.php mysqli_real_escape_string sql injection
CVE-2026-112089Medium· 4.7Dav-ee dairy-management-system delete.php mysqli_query sql injection
CVE-2026-112091Medium· 5.3Dav-ee dairy-management-system AJAX Endpoint checkfarmer.json.php information disclosure
CVE-2025-11342Medium· 4.7A weakness has been identified in code-projects Online Course Registration 1.0
CVE-2025-11343High· 7.3A security vulnerability has been detected in code-projects Student Crud Operation 3.3
CVE-2025-11317High· 7.3A vulnerability was identified in Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 1.0