PT-2026-22789 · Oretnom23 · Logistic Hub Parcel'S Management System

Liu Lanling · Published 2026-03-03 · Updated 2026-03-03 · CVE-2026-26892

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Sourcecodester Logistic Hub Parcel's Management System version 1.0

Description The software is susceptible to SQL injection through the /manage carrier.php endpoint. The vulnerability exists due to insufficient input validation when handling requests to this endpoint. The vulnerable parameter is not specified.

Recommendations Apply input validation and sanitization techniques to all user-supplied data before using it in SQL queries related to the /manage carrier.php endpoint.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2026-26892

Affected Products

Logistic Hub Parcel'S Management System

References · 3

• 🔥 https://github.com/shininadd/bug_report/blob/main/Sourcecodester/simple-logistic-hub-parcels-management-system/SQL-2.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-26892 · Security Note
• https://osv.dev/vulnerability/CVE-2026-26892 · Vendor Advisory