CVE-2026-108965: Sourcecodester Performance Indicator System

High severity, CVSS 7.3. EPSS: 0.3% chance of exploitation in the next 30 days.

A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/edit_quantity.php. Executing a manipulation of the argument pqty can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.

Affected products

• Sourcecodester Performance Indicator System: version 1.0 only

Published 2026-10-13. Last modified 2026-10-13.