Vulnerability · Published Aug 23, 2026 · Assigned by VulDB
CVE-2026-78143code-projects Barangay Resident Profiling Management System Resident Search Functionality residents.php sql injection
High 7.3
In plain English
A high-severity SQL injection in Barangay Resident Profiling Management System from code-projects. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 37% of all known vulnerabilities).
Official description
A vulnerability was determined in code-projects Barangay Resident Profiling Management System 1.0. Affected is an unknown function of the file residents.php of the component Resident Search Functionality. This manipulation of the argument Search causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| code-projects | Barangay Resident Profiling Management System | 1.0 |
Weakness: CWE-89, CWE-74 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
References
- VDB-394526 | code-projects Barangay Resident Profiling Management System Resident Search Functionality residents.php sql injection vdb-entry, technical-description
- VDB-394526 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- CVE-2026-78143 | CVE Analysis and Report third-party-advisory
- Submit #882424 | code-projects Barangay Resident Profiling Management System (BRPMS) / Barangay San Fabian 1.0 SQL Injection third-party-advisory
- https://gist.github.com/c4ttr4ck/504e89cacf12c7d6a87490f3859dfded exploit
- https://code-projects.org/ product