← Back to results
Vulnerability record · public intelligence
CVE-2026-112088
MEDIUM

Dav-ee dairy-management-system add.php mysqli_query sql injection

Published Oct 19, 2026 · Updated Oct 24, 2026

Severity · CVSSMEDIUM · 6.3
Known exploitationNot listed
EPSS / likelihood0.20%
QFinch risk scoreNot available

Original summary

Normalized public record · Updated Oct 24, 2026

Dav-ee dairy-management-system add.php mysqli_query sql injection

Publisher and source text is retained separately from QFinch interpretation.

QFinch assessment

A weakness has been identified in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. This affects the function mysqli_query of the file farmers/add.php. Executing a manipulation of the argument f_no/f_id/f_name/f_locallity/f_ac/f_phone can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The vendor was contacted early about this disclosure.

Evidence: public source records

Affected products

Affected scope reported by the available public evidence
Affected package, product or rangeFix status
Consult the referenced vendor advisory for affected versions.Consult source advisory

Matching a version is only one part of assessing exposure. QFinch has not assessed your environment on this public page.

Remediation

Apply the vendor-supported fixed release or mitigation, then verify the affected component is no longer reachable.

  1. Confirm the affected product and reachable code path exist in your environment.
  2. Apply the vendor-supported patch or mitigation from the primary advisory.
  3. Rescan the exact deployed revision and retain verification evidence.
Review primary references

Evidence coverage

CVENVDEPSS
SSVC priority
LOW
Confidence
Not available
Aliases
None reported

Scores appear only when corresponding evidence exists. Missing data is never interpreted as zero risk.

Sources and record history

  1. VDB-421853 | Dav-ee dairy-management-system add.php mysqli_query sql injection ↗
  2. VDB-421853 | CTI Indicators (IOB, IOC, TTP, IOA) ↗
  3. CVE-2026-112088 | CVE Analysis and Report ↗
  4. Submit #1011414 | Dav-ee dairy-management-system f31a584c3330c013b61f8b0306d9e0849c6d693d SQL Injection ↗
  5. Source repository ↗
  6. Source repository ↗

Record history

Published Oct 19, 2026 · Last refreshed Oct 24, 2026