CVE-2026-0582: itsourcecode Society Management System edit_activity_query.php sql injection
A vulnerability was identified in itsourcecode Society Management System 1.0. This affects an unknown part of the file /admin/editactivityquery.php. The manipulation of the argument Title leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-0582?
CVE-2026-0582 is classified as a critical vulnerability due to its potential for remote exploitation and SQL injection.
How do I fix CVE-2026-0582?
To fix CVE-2026-0582, you should sanitize and validate all user inputs in the /admin/edit_activity_query.php file to prevent SQL injection.
What systems are affected by CVE-2026-0582?
CVE-2026-0582 affects the itsourcecode Society Management System version 1.0.
Can CVE-2026-0582 be exploited remotely?
Yes, CVE-2026-0582 can be exploited remotely, allowing attackers to perform SQL injection from outside the target system.
What type of attack does CVE-2026-0582 enable?
CVE-2026-0582 enables SQL injection attacks through manipulation of the 'Title' argument in the affected PHP file.