CVE-2026-116049

A SQL injection vulnerability exists in the Registration Wizard component of the krupalshah EmployeeRecruitmentSystem (up to commit 922ff6d208278282e7c8e36d70d9ae356adec9fe). The flaw resides in the mysql_query function within the /source/registerform2.php file. Attackers can achieve remote code ...