PT-2026-45425 · Sourcecodester · Computer/Mobile Repair Shop Management System

Gxcy.Org.Cn · CVE-2026-10263 · Published 2026-06-01 · Updated 2026-06-01

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SourceCodester Computer Repair Shop Management System versions prior to 1.0

Description Remote SQL injection is possible via the manipulation of the ID argument within an unknown function of the '/admin/products/manage product.php' endpoint. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution, potentially allowing unauthorized access to the database.

Recommendations Update to a version newer than 1.0. As a temporary mitigation, restrict access to the '/admin/products/manage product.php' endpoint.

Exploit

Fix

SQL injection

Special Elements Injection

Weakness Enumeration

CWE-89

CWE-74

Related Identifiers

CVE-2026-10263

Affected Products

Computer/Mobile Repair Shop Management System

References · 7

• 🔥 https://github.com/gxcyyjy/CVE/issues/4 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-10263 · Security Note
• https://sourcecodester.com · Note
• https://vuldb.com/vuln/367543/cti · Note
• https://vuldb.com/vuln/367543 · Note
• https://vuldb.com/cve/CVE-2026-10263 · Note
• https://vuldb.com/submit/824919 · Note