Bontrofftech vulnerabilities
Published CVEs affecting Bontrofftech products: 2 record(s), with severity, exploitation and fixes.
CVE-2026-2059
Critical · 9.8
CWE-89 Feb 6, 2026
SourceCodester Medical Center Portal Management System SQL Injection via emp_edit1.php (CVE-2026-2059)
A vulnerability has been found in SourceCodester Medical Center Portal Management System 1.0. Affected is an unknown function of the file /emp_edit1.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.
CVE-2026-2057
Critical · 9.8
CWE-89 Feb 6, 2026
SQL Injection in SourceCodester Medical Center Portal Management System 1.0 login
A vulnerability was detected in SourceCodester Medical Center Portal Management System 1.0. This affects an unknown function of the file /login.php. The manipulation of the argument User results in sql injection. The attack can be executed remotely. The exploit is now public and may be used.