A vulnerability was found in SourceCodester Computer Repair Shop Management System up to 1.0. Affected is an unknown function of the file /admin/products/manage…

Published:

31 mei 2026 om 22:00:00

Alert date:

1 juni 2026 om 17:02:55

Source:

nvd.nist.gov

Web Technologies, Enterprise Applications

A SQL injection vulnerability (CVE-2026-10263) was discovered in SourceCodester Computer Repair Shop Management System version 1.0. The vulnerability affects the /admin/products/manage_product.php file where manipulation of the ID parameter leads to SQL injection. The attack can be executed remotely and exploit code has been publicly released, making this a high-risk vulnerability for organizations using this system.

Technical details

Mitigation steps:

Affected products:

SourceCodester Computer Repair Shop Management System