CVE-2026-10809
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
A SQL Injection vulnerability was discovered in itsourcecode Fees Management System 1.0 in the /manage_user.php file. An attacker can remotely manipulate the ID argument to inject SQL code. The exploit is publicly available.
Risk Assessment
An attacker could gain unauthorized access to the database, steal or modify sensitive fee and user data.
Recommendation
Immediately update the system to the latest version or apply a security patch against SQL Injection. Restrict access to /manage_user.php to trusted IP addresses only.
Other vulnerabilities in itsourcecode Fees Management System
See all- CVE-2026-10808Medium
A SQL Injection vulnerability was found in itsourcecode Fees Management System 1.0 in the /manage_student.php file. Manipulation of the ID argument allows remote SQL injection. The exploit is publicly available.
- CVE-2026-10568Medium
A SQL Injection vulnerability was found in itsourcecode Fees Management System 1.0 in the /manage_payment.php file. Manipulation of the ID argument allows remote SQL injection. The exploit is publicly available.
Original NVD description (English source)
A security flaw has been discovered in itsourcecode Fees Management System 1.0. This impacts an unknown function of the file /manage_user.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.