PT-2026-22789 · Oretnom23 · Logistic Hub Parcel'S Management System

Liu Lanling · Publicado 2026-03-03 · Atualizado 2026-03-03 · CVE-2026-26892

Positive Technologies (AI Summary)

CVSS v3.1

7.2

Alta

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Sourcecodester Logistic Hub Parcel's Management System version 1.0

Description The software is susceptible to SQL injection through the /manage carrier.php endpoint. The vulnerability exists due to insufficient input validation when handling requests to this endpoint. The vulnerable parameter is not specified.

Recommendations Apply input validation and sanitization techniques to all user-supplied data before using it in SQL queries related to the /manage carrier.php endpoint.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2026-26892

Produtos afetados

Logistic Hub Parcel'S Management System

Referências · 3

• 🔥 https://github.com/shininadd/bug_report/blob/main/Sourcecodester/simple-logistic-hub-parcels-management-system/SQL-2.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-26892 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2026-26892 · Aviso do Fabricante