CVE-2026-7076

HIGH

itsourcecode Courier Management System edit_branch.php sql injection

Title source: cna
STIX 2.1

Description

A vulnerability was determined in itsourcecode Courier Management System 1.0. Impacted is an unknown function of the file /edit_branch.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized.

References (5)

Scores

CVSS v3 7.3
EPSS 0.0003
EPSS Percentile 8.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact partial

Details

CWE
CWE-74 CWE-89
Status published
Products (1)
itsourcecode/Courier Management System 1.0
Published Apr 27, 2026
Tracked Since Apr 27, 2026