Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.5
CVE-2026-9606: itsourcecode Courier Management System 1.0 SQL Injection Risk
CVE-2026-9606 · published 5 months ago
Summary
A security flaw in itsourcecode Courier Management System 1.0 could allow hackers to access sensitive data by manipulating user IDs. This could happen if a hacker exploits a weakness in the system's user management. To stay safe, update the software to the latest version or apply a patch if one is available.
Original advisory text
A vulnerability has been found in itsourcecode Courier Management System 1.0. Impacted is an unknown function of the file /manage_user.php. Such manipulation of the argument ID leads to sql injecti...
A vulnerability has been found in itsourcecode Courier Management System 1.0. Impacted is an unknown function of the file /manage_user.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker partial control
Type
CWE-74Injection
CWE-89SQL Injection
Timeline
Published27 May 2026
Updated4 Nov 2026
First seen27 May 2026
Sources
CVE-2026-9606 · NVD
Track software like this
Free during beta