{"metadata": {"vulnerability": "CVE-2026-109607", "count": 16, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 11}}, "data": [{"timestamp": "2026-10-12T00:00:00Z", "date_only": false, "value": "2026-10-12T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "CVE-2026-109607", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-10-12T02:00:00Z", "date_only": false, "value": "2026-10-12T02:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "CVE-2026-109607", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2026-10-12T21:02:10.971Z", "date_only": false, "value": "2026-10-12T21:02:10.971Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-109607", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-12T23:07:33Z", "date_only": false, "value": "2026-10-12T23:07:33.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "CVE-2026-109607", "field": "containers.cna.timeline.2.time"}, {"timestamp": "2026-10-13T16:15:21.078Z", "date_only": false, "value": "2026-10-13T16:15:21.078Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-109607", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-13T16:15:21.078Z", "date_only": false, "value": "2026-10-13T16:15:21.078Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulDB", "record": "CVE-2026-109607", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T16:19:40.619Z", "date_only": false, "value": "2026-10-13T16:19:40.619479Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117434507598162170", "record": "CVE-2026-109607", "field": "creation_timestamp", "uuid": "c2429b7d-2bc1-4453-8ebc-7a3570e3806b", "content": "CVE-2026-109607 SourceCodester Online Exam System Login Endpoint loginExe.php sql injection A flaw has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of the file adminpanel/admin/query/loginExe.php of the component Login Endpoint. This manipulation of the argument username/pass causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used.\nhttps://www.cve.org/CVERecord?id=CVE-2026-109607https://vuldb.com/vuln/417230https://vuldb.com/vuln/417230/ctihttps://vuldb.com/cve/CVE-2026-109607https://vuldb.com/submit/1000554https://tracexlabs.com/releases/online-exam-sqli-admin.htmlhttps://www.sourcecodester.com/#sourcecodester #SourceCodester #OnlineExamSystem#CVE_2026_109607#bot", "url": "https://infosec.exchange/users/cve/statuses/117434507598162170"}, {"timestamp": "2026-10-13T17:17:29Z", "date_only": false, "value": "2026-10-13T17:17:29Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-9CFQ-W3MC-GGXM", "record": "GHSA-9CFQ-W3MC-GGXM", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-13T17:17:29.700Z", "date_only": false, "value": "2026-10-13T17:17:29.700", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109607", "record": "FKIE_CVE-2026-109607", "field": "published"}, {"timestamp": "2026-10-13T18:30:53Z", "date_only": false, "value": "2026-10-13T18:30:53Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-9CFQ-W3MC-GGXM", "record": "GHSA-9CFQ-W3MC-GGXM", "field": "published"}, {"timestamp": "2026-10-13T18:30:53Z", "date_only": false, "value": "2026-10-13T18:30:53Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-9CFQ-W3MC-GGXM", "record": "GHSA-9CFQ-W3MC-GGXM", "field": "modified"}, {"timestamp": "2026-10-16T22:08:54.938Z", "date_only": false, "value": "2026-10-16T22:08:54.938533Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-109607", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-16T22:08:54.938Z", "date_only": false, "value": "2026-10-16T22:08:54.938533Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109607", "record": "FKIE_CVE-2026-109607", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-16T22:09:07.051Z", "date_only": false, "value": "2026-10-16T22:09:07.051Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-109607", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-16T22:09:07.051Z", "date_only": false, "value": "2026-10-16T22:09:07.051Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-109607", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T23:16:58.773Z", "date_only": false, "value": "2026-10-16T23:16:58.773", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109607", "record": "FKIE_CVE-2026-109607", "field": "lastModified"}]}