CVE-2026-3068mediumCWE-74CWE-89

CVE-2026-3068: medium-severity vulnerability in itsourcecode Document Management System

itsourcecode Document Management System deluser.php sql injection

Published

Follow this CVE+ Monitor Document Management System

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.9epss 0.4%
A weakness has been identified in itsourcecode Document Management System 1.0. This impacts an unknown function of the file /deluser.php. Executing a manipulation of the argument user2del can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Affected products
itsourcecode · Document Management System
Related CVEs — itsourcecode Document Management System

In the same product, most dangerous first.

CVE-2024-6803MEDIUMitsourcecode Document Management System insert.php sql injectionEPSS 0.5%CVE-2024-6014MEDIUMitsourcecode Document Management System edithis.php sql injectionEPSS 0.5%CVE-2026-3153MEDIUMitsourcecode Document Management System register.php sql injectionEPSS 0.5%CVE-2026-3133MEDIUMitsourcecode Document Management System Login loging.php sql injectionEPSS 0.4%CVE-2026-3069MEDIUMitsourcecode Document Management System edtlbls.php sql injectionEPSS 0.4%