CVE-2026-125075
SourceCodester Smart Attendance System with QR Code Scanner Admin Account Creation create_admin.php getMessage missing authentication
CVSS Score
7.3
EPSS Score
0.0%
EPSS Percentile
0th
A vulnerability has been found in SourceCodester Smart Attendance System with QR Code Scanner 1.0. This impacts the function getMessage of the file create_admin.php of the component Admin Account Creation. Such manipulation of the argument e leads to missing authentication. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.
| CWE | CWE-306 CWE-287 |
| Vendor | sourcecodester |
| Product | smart attendance system with qr code scanner |
| Published | Nov 9, 2026 |
Stay Ahead of the Next One
Get instant alerts for sourcecodester smart attendance system with qr code scanner
Be the first to know when new high vulnerabilities affecting sourcecodester smart attendance system with qr code scanner are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
SourceCodester / Smart Attendance System with QR Code Scanner
1.0
References
vuldb.com: https://vuldb.com/vuln/433179 vuldb.com: https://vuldb.com/vuln/433179/cti vuldb.com: https://vuldb.com/cve/CVE-2026-125075 vuldb.com: https://vuldb.com/submit/1041013 github.com: https://github.com/yuechuya/sourcecodester-vuln-reports/blob/main/reports/VULN-02-Unauthenticated-Admin-Creation.md sourcecodester.com: https://www.sourcecodester.com/
Credits
🔍 yuechuya (VulDB User)