A SQL injection vulnerability in CodeAstro Simple Attendance Management System v1.0 allows remote unauthenticated attackers to bypass authentication via the username p…

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. Apr 17, 2026 · NIST NVD

   Detected

   A SQL injection vulnerability in CodeAstro Simple Attendance Management System v1.0 allows remote unauthenticated attackers to bypass authentication via the username parameter in index.php.

2. Jun 17, 2026 · NIST NVD

   Updated

   A SQL injection vulnerability in CodeAstro Simple Attendance Management System v1.0 allows remote unauthenticated attackers to bypass authentication via the username parameter in index.php.

Sources

• CVE.orgVulnerability recordCVE-2026-37749

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-37749

  A SQL injection vulnerability in CodeAstro Simple Attendance Management System v1.0 allows remote unauthenticated attackers to bypass authentication via the username parameter in index.php.

  nvd.nist.gov

References

• Reference · codeastro.com
• Reference · github.com