PT-2026-7009 · Sourcecodester · Prison Management System

Hater · Published 2026-02-08 · Updated 2026-02-10 · CVE-2026-2177

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SourceCodester Prison Management System version 1.0

Description A flaw exists in the Login component of the software, specifically within an unknown function. This issue allows for session fixation, potentially enabling remote attacks. The exploit for this issue has been publicly disclosed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Session Fixation

Weakness Enumeration

CWE-384

Related Identifiers

CVE-2026-2177

Affected Products

Prison Management System

References · 10

• 🔥 https://github.com/hater-us/CVE/issues/10 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-2177 · Security Note
• https://osv.dev/vulnerability/CVE-2026-2177 · Vendor Advisory
• https://vuldb.com/?id.344880 · Note
• https://t.me/CVEtracker/44125 · Telegram Post
• https://twitter.com/CVEnew/status/2020582970159939745 · Twitter Post
• https://vuldb.com/?ctiid.344880 · Note
• https://vuldb.com/?submit.749485 · Note
• https://t.me/cveNotify/151539 · Telegram Post
• https://sourcecodester.com · Note