CVE-2026-2117: itsourcecode Society Management System edit_activity.php sql injection
A vulnerability was found in itsourcecode Society Management System 1.0. The affected element is an unknown function of the file /admin/editactivity.php. Performing a manipulation of the argument activityid results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2117?
CVE-2026-2117 has a high severity rating due to the potential for SQL injection attacks.
How do I fix CVE-2026-2117?
To fix CVE-2026-2117, validate and sanitize user inputs, especially the activity_id parameter in edit_activity.php.
What are the potential impacts of CVE-2026-2117?
The potential impacts of CVE-2026-2117 include unauthorized data access and data manipulation through SQL injection.
What versions of the Society Management System are affected by CVE-2026-2117?
CVE-2026-2117 affects version 1.0 of the itsourcecode Society Management System.
How can I detect exploitation of CVE-2026-2117?
Exploitation of CVE-2026-2117 can be detected by checking for unusual database queries or unexpected application behavior related to activity_id.