CVE-2026-1119: itsourcecode Society Management System delete_activity.php sql injection
A flaw has been found in itsourcecode Society Management System 1.0. The affected element is an unknown function of the file /admin/deleteactivity.php. Executing a manipulation of the argument activityid can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-1119?
CVE-2026-1119 has been classified as a high severity vulnerability due to its potential for SQL injection.
How do I fix CVE-2026-1119?
To fix CVE-2026-1119, you should sanitize and validate the input passed to the activity_id parameter in the delete_activity.php file.
What systems are affected by CVE-2026-1119?
CVE-2026-1119 affects the itsourcecode Society Management System version 1.0.
What are the potential consequences of CVE-2026-1119?
Exploiting CVE-2026-1119 can allow an attacker to execute arbitrary SQL queries against the database, leading to data leakage or corruption.
Is there a patch available for CVE-2026-1119?
As of now, there is no official patch released for CVE-2026-1119, so remediation involves code changes.