CVE-2026-125078

6.3 MEDIUMpublic exploit available

Published 2026-11-10 · Updated 2026-11-10

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

A security flaw has been discovered in SourceCodester Smart Attendance System with QR Code Scanner 1.0. This affects an unknown part of the file login.php. The manipulation results in session fixiation. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Weaknesses

CWE-384

Public exploit & PoC references

https://github.com/yuechuya/sourcecodester-vuln-reports/blob/main/reports/VULN-06-Session-Fixation.md

All references

https://github.com/yuechuya/sourcecodester-vuln-reports/blob/main/reports/VULN-06-Session-Fixation.md
https://vuldb.com/cve/CVE-2026-125078
https://vuldb.com/submit/1041017
https://vuldb.com/vuln/433183
https://vuldb.com/vuln/433183/cti
https://www.sourcecodester.com/

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

CRITICALCVE-2024-34324
UNSCOREDCVE-2026-101268
CRITICALCVE-2026-102489
MEDIUMCVE-2026-104469PoC
MEDIUMCVE-2026-105233PoC
MEDIUMCVE-2026-107124
MEDIUMCVE-2026-107226PoC
MEDIUMCVE-2026-107229PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.