Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.9
itsourcecode Document Management System: SQL Injection in Login File
CVE-2026-3133
Summary
The itsourcecode Document Management System 1.0 has a security flaw in its login system. This means that an attacker could potentially inject malicious SQL code into the system, which could allow them to access sensitive information. You should update to the latest version of the software to fix this issue.
What to do
No fix is available yet. Check with your software vendor for updates.
Affected software
| Vendor | Product | Affected versions | Fix available |
|---|---|---|---|
| admerc | document_management_system | 1.0 | – |
Original title
A vulnerability has been found in itsourcecode Document Management System 1.0. This issue affects some unknown processing of the file /loging.php of the component Login. The manipulation of the arg...
Original description
A vulnerability has been found in itsourcecode Document Management System 1.0. This issue affects some unknown processing of the file /loging.php of the component Login. The manipulation of the argument Username leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.
nvd CVSS2.0
7.5
nvd CVSS3.1
9.8
nvd CVSS4.0
6.9
Vulnerability type
CWE-74
Injection
CWE-89
SQL Injection
- https://github.com/ltranquility/CVE/issues/41 Exploit Issue Tracking Mitigation Third Party Advisory
- https://itsourcecode.com/ Product
- https://vuldb.com/?ctiid.347616 Permissions Required VDB Entry
- https://vuldb.com/?id.347616 Third Party Advisory VDB Entry
- https://vuldb.com/?submit.758323 Third Party Advisory VDB Entry
Published: 25 Feb 2026 · Updated: 12 Mar 2026 · First seen: 6 Mar 2026