Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
2.1
CVE-2026-10296: itsourcecode Fees Management System: SQL Injection in /ajax.php
CVE-2026-10296 · published 5 months ago
Summary
The itsourcecode Fees Management System, specifically the /ajax.php file, contains a vulnerability that could allow an attacker to manipulate user input and inject malicious SQL code. This could lead to unauthorized access or data theft. It's recommended that the system be updated to a patched version or that users be cautious when entering sensitive information.
Original advisory text
A vulnerability was determined in itsourcecode Fees Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php. Executing a manipulation of the argument Usern...
A vulnerability was determined in itsourcecode Fees Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php. Executing a manipulation of the argument Username can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-74Injection
CWE-89SQL Injection
Timeline
Published1 Jun 2026
Updated4 Nov 2026
First seen2 Jun 2026
Sources
CVE-2026-10296 · NVD
Track software like this
Free during beta