PT-2026-45665 · Itsourcecode · Fleet Management System

Ooliveira · Published 2026-06-01 · Updated 2026-06-02 · CVE-2026-10302

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions itsourcecode Fees Management System version 1.0

Description A flaw in the /manage fee.php file allows for remote SQL injection, which is a technique where malicious SQL statements are inserted into entry fields for execution. This occurs through the manipulation of the ID argument within an unknown function of the specified file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2026-10302

Affected Products

Fleet Management System

References · 8

• 🔥 https://github.com/ltranquility/vuln_submit/issues/10 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-10302 · Security Note
• https://vuldb.com/vuln/367595 · Note
• https://vuldb.com/submit/828141 · Note
• https://itsourcecode.com · Note
• https://t.me/CVEtracker/55547 · Telegram Post
• https://vuldb.com/cve/CVE-2026-10302 · Note
• https://vuldb.com/vuln/367595/cti · Note