CVE-2026-10568
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
A SQL Injection vulnerability was found in itsourcecode Fees Management System 1.0 in the /manage_payment.php file. Manipulation of the ID argument allows remote SQL injection. The exploit is publicly available.
Risk Assessment
An attacker can remotely read, modify or delete payment data, leading to financial integrity breaches.
Recommendation
Immediately update the system or apply a security patch. Implement input filtering for the ID argument in /manage_payment.php.
Other vulnerabilities in itsourcecode Fees Management System
See all- CVE-2026-10809Medium
A SQL Injection vulnerability was discovered in itsourcecode Fees Management System 1.0 in the /manage_user.php file. An attacker can remotely manipulate the ID argument to inject SQL code. The exploit is publicly available.
- CVE-2026-10808Medium
A SQL Injection vulnerability was found in itsourcecode Fees Management System 1.0 in the /manage_student.php file. Manipulation of the ID argument allows remote SQL injection. The exploit is publicly available.
Original NVD description (English source)
A vulnerability was detected in itsourcecode Fees Management System 1.0. Affected is an unknown function of the file /manage_payment.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public and may be used.