PT-2026-30423 · Itsourcecode · Online Cellphone System

Wenzhuolin · Published 2026-04-05 · Updated 2026-04-05 · CVE-2026-5553

NVD

CVSS v2.0

6.5

Medium

AV:N/AC:L/Au:S/C:P/I:P/A:P

A vulnerability was identified in itsourcecode Online Cellphone System 1.0. Affected by this vulnerability is an unknown functionality of the file /cp/available.php of the component Parameter Handler. Such manipulation of the argument Name leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2026-5553

Affected Products

Online Cellphone System

References · 6

• 🔥 https://github.com/Wzl731/test/issues/3 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-5553 · Security Note
• https://itsourcecode.com · Note
• https://vuldb.com/vuln/355323/cti · Note
• https://vuldb.com/submit/782873 · Note
• https://vuldb.com/vuln/355323 · Note