CVE-2026-2009mediumCWE-266CWE-284

CVE-2026-2009: falha de média gravidade em SourceCodester Gas Agency Management System

SourceCodester Gas Agency Management System createUser.php access control

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Gas Agency Management System

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.3epss 0.3%
A flaw has been found in SourceCodester Gas Agency Management System 1.0. This issue affects some unknown processing of the file /gasmark/php_action/createUser.php. Executing a manipulation can lead to improper access controls. It is possible to launch the attack remotely. The exploit has been published and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
SourceCodester · Gas Agency Management System
CVEs relacionadas — SourceCodester Gas Agency Management System

No mesmo produto, das mais perigosas para as menos.

CVE-2022-2779MEDIUMSourceCodester Gas Agency Management System oneWord.php unrestricted uploadEPSS 0.9%CVE-2022-2802HIGHSourceCodester Gas Agency Management System login.php sql injectionEPSS 0.8%CVE-2024-5051MEDIUMSourceCodester Gas Agency Management System edituser.php sql injectionEPSS 0.6%