Login Request a demo
Medium severity · published Jun 4, 2026
CVE-2026-10809
itsourcecode Fees Management System manage_user.php sql injection
6.3
CVSS
0.2%
EPSS
No
On KEV
Description
A security flaw has been discovered in itsourcecode Fees Management System 1.0. This impacts an unknown function of the file /manage_user.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 10% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FM
Fees Management System · itsourcecode
1.0 · source: vendor
Affected product
FM
Fees Management System
itsourcecode
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-10809
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-10809
github.com
https://github.com/jocker-king253/cve/issues/1
itsourcecode.com
https://itsourcecode.com/
vuldb.com
https://vuldb.com/cve/CVE-2026-10809
vuldb.com
https://vuldb.com/submit/834180
vuldb.com
https://vuldb.com/vuln/368257
vuldb.com
https://vuldb.com/vuln/368257/cti
More from Fees Management System
6.3
CVE-2026-10811
itsourcecode Fees Management System receipt.php sql injection
6.3
CVE-2026-10808
itsourcecode Fees Management System manage_student.php sql injection
6.3
CVE-2026-10568
itsourcecode Fees Management System manage_payment.php sql injection
6.3
CVE-2026-10302
itsourcecode Fees Management System manage_fee.php sql injection
6.3
CVE-2026-10297
itsourcecode Fees Management System manage_course.php sql injection