CVE-2026-7592

HIGH

itsourcecode Courier Management System edit_staff.php sql injection

Title source: cna

Description

A weakness has been identified in itsourcecode Courier Management System 1.0. This affects an unknown function of the file /edit_staff.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.

References (5)

[Vdb Entry, Technical Description] https://vuldb.com/vuln/360545

[Signature, Permissions Required] https://vuldb.com/vuln/360545/cti

[Third Party Advisory] https://vuldb.com/submit/804453

[Exploit] https://github.com/ltranquility/submit/issues/11

[Product] https://itsourcecode.com/

Scores

CVSS v3 7.3

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

Details

CWE

CWE-74 CWE-89

Status published

Products (1)

itsourcecode/Courier Management System 1.0

Published May 01, 2026

Tracked Since May 02, 2026