# CVE-2026-112144: satya-vinay Events-Management-System sensitive data exposure in SQL dump

Source: https://junglewise.ai/threats/cve-2026-112144-a-weakness-has-been-identified-in-satya-vinay-events-management  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-19. Updated: 2026-10-19  
License: CC BY 4.0 with a link back

CVE-2026-112144 · Severity: medium · CVSS 5.3 · Published 2026-10-19

An events management web application for universities contains database dump files committed to its public repository with real personal names and email addresses of event registrants exposed. Attackers can access this data without authentication by browsing or cloning the repository, exposing individuals to spam, phishing, and social engineering attacks. The sensitive information is permanently embedded in the git history and difficult to fully remove.

Technologies: [Satya-Vinay Events-Management-System](https://junglewise.ai/threats/technologies/events-management-system). Vendors: [Satya-Vinay](https://junglewise.ai/threats/vendors/satya-vinay).

## Quick answers

**Is CVE-2026-112144 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-112144 being exploited in the wild.

**How severe is CVE-2026-112144?** Medium severity, with a CVSS score of 5.3, published 19 October 2026.

**Which products and versions are affected?** Satya-Vinay Events-Management-System up to commit 437c77ceb69bf9fe2e3f4f46f7871b83f425383a.

**Is there a fix for CVE-2026-112144?** No fixed version is recorded yet. Remove the SQL dump files from the repository and rewrite git history to purge the sensitive data from all revisions. Note that this is only partially effective due to potential mirrors and forks; affected individuals should be notified to monitor for phishing and unsolicited contact.</anigation>
<parameter name="timeline">[{"kind": "disclosed", "at": "2026-10-04", "note": "Issue #6 opened on GitHub reporting SQL dumps with personal data"}, {"kind": "advisory", "at": "2026-10-19"}] If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-112144 attacked?** It is attacked over the network, in a web application.

**Am I affected by CVE-2026-112144?** Check whether you run Satya-Vinay Events-Management-System at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix


Remove the SQL dump files from the repository and rewrite git history to purge the sensitive data from all revisions. Note that this is only partially effective due to potential mirrors and forks; affected individuals should be notified to monitor for phishing and unsolicited contact.</anigation>
<parameter name="timeline">[{"kind": "disclosed", "at": "2026-10-04", "note": "Issue #6 opened on GitHub reporting SQL dumps with personal data"}, {"kind": "advisory", "at": "2026-10-19"}]

## Technical details

The vulnerability is exposure of private personal information (CWE-359) in SQL dump files (project.sql and symbols.sql) that were committed to a public repository. The application stores real production data including names and email addresses in INSERT statements viewable to any unauthenticated actor with network access. Attack requires no authentication, user interaction, or specialized capabilities—data is trivially accessible through standard git operations.

## Affected products

- satya-vinay Events-Management-System up to commit 437c77ceb69bf9fe2e3f4f46f7871b83f425383a

## References

- [https://github.com/satya-vinay/Events-Management-System/](https://github.com/satya-vinay/Events-Management-System/)
- [https://github.com/satya-vinay/Events-Management-System/issues/6](https://github.com/satya-vinay/Events-Management-System/issues/6)

## Related threats

- [satya-vinay Events-Management-System missing authentication](https://junglewise.ai/threats/cve-2026-112143-a-security-flaw-has-been-discovered-in-satya-vinay-events)
- [satya-vinay Events-Management-System SQL injection in Registration-Delete Handler](https://junglewise.ai/threats/cve-2026-112142-a-vulnerability-was-identified-in-satya-vinay-events-management)
- [satya-vinay Events-Management-System SQL injection in registration editor](https://junglewise.ai/threats/cve-2026-112141-a-vulnerability-was-determined-in-satya-vinay-events-management)