PT-2026-45639 · Itsourcecode · Fleet Management System
CVSS v2.0
6.5
Medium
| Vector | AV:N/AC:L/Au:S/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
itsourcecode Fees Management System version 1.0
Description
A remote SQL injection exists in the
/ajax.php endpoint. This issue occurs when the Username argument is manipulated, allowing an attacker to execute arbitrary SQL commands.Recommendations
Update itsourcecode Fees Management System version 1.0 to a patched version. As a temporary workaround, restrict access to the
/ajax.php endpoint or sanitize the Username parameter to prevent malicious input.Exploit
Fix
SQL injection
Special Elements Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Fleet Management System