CVE-2026-10257: itsourcecode Content Management System update_ss_img.php sql injection
A security flaw has been discovered in itsourcecode Content Management System 1.0. This issue affects some unknown processing of the file /admin/updatessimg.php. The manipulation of the argument topicid results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-10257?
The severity of CVE-2026-10257 is rated as medium with a score of 6.3.
How do I fix CVE-2026-10257?
To fix CVE-2026-10257, ensure that your itsourcecode Content Management System is updated to the latest version that addresses this SQL injection vulnerability.
What type of vulnerability is CVE-2026-10257?
CVE-2026-10257 is classified as an SQL Injection vulnerability.
Can CVE-2026-10257 be exploited remotely?
Yes, CVE-2026-10257 can be exploited remotely by manipulating the topic_id argument.
What impacts can CVE-2026-10257 have on my system?
CVE-2026-10257 can lead to unauthorized access to sensitive data due to SQL injection vulnerabilities.