PT-2026-45639 · Itsourcecode · Fleet Management System

Gachong · Published 2026-06-01 · Updated 2026-06-01 · CVE-2026-10296

NVD

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

A vulnerability was determined in itsourcecode Fees Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php. Executing a manipulation of the argument Username can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.

Exploit

Fix

SQL injection

Special Elements Injection

Weakness Enumeration

CWE-89

CWE-74

Related Identifiers

CVE-2026-10296

Affected Products

Fleet Management System

References · 7

• 🔥 https://github.com/ltranquility/vuln_submit/issues/7 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-10296 · Security Note
• https://vuldb.com/cve/CVE-2026-10296 · Note
• https://vuldb.com/vuln/367589/cti · Note
• https://vuldb.com/vuln/367589 · Note
• https://vuldb.com/submit/826578 · Note
• https://itsourcecode.com · Note