CVE-2026-2115: itsourcecode Society Management System delete_expenses.php sql injection
A flaw has been found in itsourcecode Society Management System 1.0. This issue affects some unknown processing of the file /admin/deleteexpenses.php. This manipulation of the argument expensesid causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2115?
CVE-2026-2115 is considered a high severity vulnerability due to its potential for SQL injection attacks.
How do I fix CVE-2026-2115?
To fix CVE-2026-2115, validate and sanitize user input for the expenses_id parameter in the delete_expenses.php file.
What are the potential impacts of CVE-2026-2115?
The potential impacts of CVE-2026-2115 include unauthorized data access, data manipulation, and compromise of the database.
Which software is affected by CVE-2026-2115?
CVE-2026-2115 affects the itsourcecode Society Management System version 1.0.
Can exploitation of CVE-2026-2115 be detected?
Exploitation of CVE-2026-2115 can potentially be detected through abnormal database queries and logs indicating SQL injection attempts.