Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
2.0

SourceCodester Water Billing Management System SQL Injection

CVE-2026-10237 · published 5 months ago
Summary

A public exploit exists for an unknown vulnerability in the User Management Module of SourceCodester Water Billing Management System 1.0. This could allow an attacker to access sensitive data or take control of the system. We recommend that you update to a fixed version or remove the system from your network until a patch is available.

Original advisory text
A vulnerability was found in SourceCodester Water Billing Management System 1.0. Impacted is an unknown function of the file /admin/?page=user/manage_user of the component User Management Module. P...
A vulnerability was found in SourceCodester Water Billing Management System 1.0. Impacted is an unknown function of the file /admin/?page=user/manage_user of the component User Management Module. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
2.0 Low
Exploitation
<1% chance of attack within 30 days
Type
CWE-74Injection
CWE-89SQL Injection
Timeline
Published1 Jun 2026
Updated4 Nov 2026
First seen1 Jun 2026
Sources
CVE-2026-10237 · NVD
Track software like this
Free during beta