CVE-2026-2116

HIGH

Angeljudesuarez Society Management System - Injection

Title source: rule

Description

A vulnerability has been found in itsourcecode Society Management System 1.0. Impacted is an unknown function of the file /admin/edit_expenses.php. Such manipulation of the argument expenses_id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

References (5)

Scores

CVSS v3 7.3
EPSS 0.0001
EPSS Percentile 1.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Classification

CWE
CWE-74 CWE-89
Status published

Affected Products (1)

angeljudesuarez/society_management_system

Timeline

Published Feb 08, 2026
Tracked Since Feb 18, 2026