PT-2026-35338 · Itsourcecode · Best Courier Management System

Willchen · Published 2026-04-27 · Updated 2026-04-27 · CVE-2026-7076

Mitre

CVSS v3.1

7.3

High

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

A vulnerability was determined in itsourcecode Courier Management System 1.0. Impacted is an unknown function of the file /edit branch.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2026-7076

Affected Products

Best Courier Management System

References · 6

• 🔥 https://github.com/Beatriz-ai-boop/cve/issues/5 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-7076 · Security Note
• https://vuldb.com/vuln/359651 · Note
• https://itsourcecode.com · Note
• https://vuldb.com/vuln/359651/cti · Note
• https://vuldb.com/submit/799546 · Note