Vulnerabilities

A flaw has been found in SourceCodester Smart Attendance System with QR Code Scanner 1.0.

A flaw has been found in SourceCodester Smart Attendance System with QR Code Scanner 1.0. This affects an unknown function of the file reset_password.php of the component Password Reset. This manipulation of the argument username/password causes weak password recovery. The attack is possible to be carried out remotely. The exploit has been published and may be used.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

SourceCodester

Product

Smart Attendance System with QR Code Scanner

CVSS v3.1

7.3 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Exploitation

public exploit code reported

Weakness

CWE-640

NVD status

Deferred

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-125074 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 30
   CVE NVD 1h ago

   A security flaw has been discovered in SourceCodester Smart Attendance System with QR Code Scanner 1.0.

   PoC public CVSS 6.3 CVE-2026-125078 SourceCodester
2. 18
   CVE NVD 1h ago

   A vulnerability was determined in SourceCodester Smart Attendance System with QR Code Scanner 1.0.

   CVSS 4.3 CVE-2026-125077 SourceCodester
3. 25
   CVE NVD 1h ago

   A vulnerability was found in SourceCodester Smart Attendance System with QR Code Scanner 1.0.

   CVSS 7.3 CVE-2026-125076 SourceCodester
4. 25
   CVE NVD 2h ago

   A vulnerability has been found in SourceCodester Smart Attendance System with QR Code Scanner 1.0.

   CVSS 7.3 CVE-2026-125075 SourceCodester