CVE-2026-10237

MediumCVSS 4.7

Published: 01/06/2026(UTC)Updated: 22/07/2026(UTC)Translated: 23/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.26%

18th percentile - higher than 18% of all known CVEs

Summary

SourceCodester Water Billing Management System 1.0 has an SQL injection vulnerability in /admin/?page=user/manage_user via the ID argument.

Risk Assessment

An attacker can remotely manipulate the database, leading to data leakage or modification.

Recommendation

Apply input filtering or use prepared statements; consider updating the system.

Other vulnerabilities in SourceCodester Water Billing Management System

CVE-2026-10236High
A vulnerability in SourceCodester Water Billing Management System 1.0 affects unknown processing in the file /classes/Users.php?f=save of the User Management Endpoint component, leading to improper authorization. The attack can be launched remotely and the exploit has been disclosed publicly.

Original NVD description (English source)

A vulnerability was found in SourceCodester Water Billing Management System 1.0. Impacted is an unknown function of the file /admin/?page=user/manage_user of the component User Management Module. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used.