CVE-2026-10808
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
A SQL Injection vulnerability was found in itsourcecode Fees Management System 1.0 in the /manage_student.php file. Manipulation of the ID argument allows remote SQL injection. The exploit is publicly available.
Risk Assessment
An attacker can remotely read, modify or delete student and fee data, leading to data confidentiality and integrity breaches.
Recommendation
Immediately update the system or apply a security patch. Implement input filtering for the ID argument in /manage_student.php.
Other vulnerabilities in itsourcecode Fees Management System
See all- CVE-2026-10809Medium
A SQL Injection vulnerability was discovered in itsourcecode Fees Management System 1.0 in the /manage_user.php file. An attacker can remotely manipulate the ID argument to inject SQL code. The exploit is publicly available.
- CVE-2026-10568Medium
A SQL Injection vulnerability was found in itsourcecode Fees Management System 1.0 in the /manage_payment.php file. Manipulation of the ID argument allows remote SQL injection. The exploit is publicly available.
Original NVD description (English source)
A vulnerability was identified in itsourcecode Fees Management System 1.0. This affects an unknown function of the file /manage_student.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.