PT-2026-36974 · Itsourcecode · Best Courier Management System

Wanzhiqiangxq · Published 2026-05-05 · Updated 2026-05-05 · CVE-2026-7822

NVD

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

A vulnerability was identified in itsourcecode Courier Management System 1.0. This impacts an unknown function of the file /print pdets.php. The manipulation of the argument ids leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2026-7822

Affected Products

Best Courier Management System

References · 6

• 🔥 https://github.com/ltranquility/submit/issues/14 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-7822 · Security Note
• https://vuldb.com/submit/807773 · Note
• https://vuldb.com/vuln/361074/cti · Note
• https://itsourcecode.com · Note
• https://vuldb.com/vuln/361074 · Note