<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[🚨 CRITICAL SQL injection (CVE-2026-37749) in CodeAstro Simple Attendance Management System v1.0: Remote unauthenticated attackers can bypass authentication via index.php.]]></title><description><![CDATA[<p><img src="https://board.circlewithadot.net/assets/plugins/nodebb-plugin-emoji/emoji/android/1f6a8.png?v=28325c671da" class="not-responsive emoji emoji-android emoji--rotating_light" style="height:23px;width:auto;vertical-align:middle" title="🚨" alt="🚨" /> CRITICAL SQL injection (CVE-2026-37749) in CodeAstro Simple Attendance Management System v1.0: Remote unauthenticated attackers can bypass authentication via index.php. Restrict access &amp; deploy WAFs until a patch arrives. <a href="https://radar.offseq.com/threat/cve-2026-37749-na-c4c6e5dc" rel="nofollow noopener"><span>https://</span><span>radar.offseq.com/threat/cve-20</span><span>26-37749-na-c4c6e5dc</span></a> <a href="https://infosec.exchange/tags/OffSeq" rel="tag">#<span>OffSeq</span></a> <a href="https://infosec.exchange/tags/SQLi" rel="tag">#<span>SQLi</span></a> <a href="https://infosec.exchange/tags/Infosec" rel="tag">#<span>Infosec</span></a></p>

<div class="row mt-3"><div class="col-12 mt-3"><img class="img-thumbnail" src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/421/467/354/466/365/original/54a4f8a2ee661fb2.png" alt="Link Preview Image" /></div></div>]]></description><link>https://board.circlewithadot.net/topic/993b5fa1-a48c-4ee7-8c5d-1304da153208/critical-sql-injection-cve-2026-37749-in-codeastro-simple-attendance-management-system-v1.0-remote-unauthenticated-attackers-can-bypass-authentication-via-index.php.</link><generator>RSS for Node</generator><lastBuildDate>Fri, 15 May 2026 02:51:42 GMT</lastBuildDate><atom:link href="https://board.circlewithadot.net/topic/993b5fa1-a48c-4ee7-8c5d-1304da153208.rss" rel="self" type="application/rss+xml"/><pubDate>Fri, 17 Apr 2026 18:30:12 GMT</pubDate><ttl>60</ttl></channel></rss>