{
    "dataType": "CVE_RECORD",
    "dataVersion": "5.2",
    "cveMetadata": {
        "cveId": "CVE-2026-78143",
        "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "state": "PUBLISHED",
        "assignerShortName": "VulDB",
        "dateReserved": "2026-08-23T06:08:32.464Z",
        "datePublished": "2026-08-23T22:15:09.608Z",
        "dateUpdated": "2026-08-23T22:15:09.608Z"
    },
    "containers": {
        "cna": {
            "providerMetadata": {
                "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
                "shortName": "VulDB",
                "dateUpdated": "2026-08-23T22:15:09.608Z"
            },
            "title": "code-projects Barangay Resident Profiling Management System Resident Search Functionality residents.php sql injection",
            "problemTypes": [
                {
                    "descriptions": [
                        {
                            "type": "CWE",
                            "cweId": "CWE-89",
                            "lang": "en",
                            "description": "SQL Injection"
                        }
                    ]
                },
                {
                    "descriptions": [
                        {
                            "type": "CWE",
                            "cweId": "CWE-74",
                            "lang": "en",
                            "description": "Injection"
                        }
                    ]
                }
            ],
            "affected": [
                {
                    "vendor": "code-projects",
                    "product": "Barangay Resident Profiling Management System",
                    "versions": [
                        {
                            "version": "1.0",
                            "status": "affected"
                        }
                    ],
                    "cpes": [
                        "cpe:2.3:a:code-projects:barangay_resident_profiling_management_system:*:*:*:*:*:*:*:*"
                    ],
                    "modules": [
                        "Resident Search Functionality"
                    ]
                }
            ],
            "descriptions": [
                {
                    "lang": "en",
                    "value": "A vulnerability was determined in code-projects Barangay Resident Profiling Management System 1.0. Affected is an unknown function of the file residents.php of the component Resident Search Functionality. This manipulation of the argument Search causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized."
                }
            ],
            "metrics": [
                {
                    "cvssV4_0": {
                        "version": "4.0",
                        "baseScore": 6.9,
                        "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
                        "baseSeverity": "MEDIUM"
                    }
                },
                {
                    "cvssV3_1": {
                        "version": "3.1",
                        "baseScore": 7.3,
                        "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
                        "baseSeverity": "HIGH"
                    }
                },
                {
                    "cvssV3_0": {
                        "version": "3.0",
                        "baseScore": 7.3,
                        "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
                        "baseSeverity": "HIGH"
                    }
                },
                {
                    "cvssV2_0": {
                        "version": "2.0",
                        "baseScore": 7.5,
                        "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR"
                    }
                }
            ],
            "timeline": [
                {
                    "time": "2026-08-23T00:00:00.000Z",
                    "lang": "en",
                    "value": "Advisory disclosed"
                },
                {
                    "time": "2026-08-23T02:00:00.000Z",
                    "lang": "en",
                    "value": "VulDB entry created"
                },
                {
                    "time": "2026-08-23T08:13:47.000Z",
                    "lang": "en",
                    "value": "VulDB entry last update"
                }
            ],
            "credits": [
                {
                    "lang": "en",
                    "value": "c4ttr4ck (VulDB User)",
                    "type": "reporter"
                }
            ],
            "references": [
                {
                    "url": "https://vuldb.com/vuln/394526",
                    "name": "VDB-394526 | code-projects Barangay Resident Profiling Management System Resident Search Functionality residents.php sql injection",
                    "tags": [
                        "vdb-entry",
                        "technical-description"
                    ]
                },
                {
                    "url": "https://vuldb.com/vuln/394526/cti",
                    "name": "VDB-394526 | CTI Indicators (IOB, IOC, TTP, IOA)",
                    "tags": [
                        "signature",
                        "permissions-required"
                    ]
                },
                {
                    "url": "https://vuldb.com/cve/CVE-2026-78143",
                    "name": "CVE-2026-78143 | CVE Analysis and Report",
                    "tags": [
                        "third-party-advisory"
                    ]
                },
                {
                    "url": "https://vuldb.com/submit/882424",
                    "name": "Submit #882424 | code-projects Barangay Resident Profiling Management System (BRPMS) / Barangay San Fabian 1.0 SQL Injection",
                    "tags": [
                        "third-party-advisory"
                    ]
                },
                {
                    "url": "https://gist.github.com/c4ttr4ck/504e89cacf12c7d6a87490f3859dfded",
                    "tags": [
                        "exploit"
                    ]
                },
                {
                    "url": "https://code-projects.org/",
                    "tags": [
                        "product"
                    ]
                }
            ],
            "tags": [
                "x_freeware"
            ],
            "x_generator": [
                "VulDB PVTS v202608"
            ]
        }
    }
}