← voltar
CVE-2026-10809

itsourcecode Fees Management System manage_user.php sql injection

CVSS 5.3 MEDIUMEPSS 0.2%CWE-74CWE-89
A security flaw has been discovered in itsourcecode Fees Management System 1.0. This impacts an unknown function of the file /manage_user.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
itsourcecode · Fees Management System
PoCs públicas encontradas — 1
cve_referencegithub.com/jocker-king253/cve/issues/1não verificado
⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://github.com/jocker-king253/cve/issues/1https://itsourcecode.com/https://vuldb.com/cve/CVE-2026-10809https://vuldb.com/submit/834180https://vuldb.com/vuln/368257https://vuldb.com/vuln/368257/cti