CVE-2026-2217: itsourcecode Event Management System manage_user.php sql injection
A vulnerability was found in itsourcecode Event Management System 1.0. The impacted element is an unknown function of the file /admin/manageuser.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2217?
CVE-2026-2217 has a high severity rating due to the potential for SQL injection attacks that can lead to unauthorized access to data.
How do I fix CVE-2026-2217?
To fix CVE-2026-2217, sanitize and validate all user inputs, particularly the ID argument in manage_user.php, to prevent SQL injection.
What type of vulnerability is CVE-2026-2217?
CVE-2026-2217 is classified as an SQL injection vulnerability, allowing attackers to manipulate database queries.
Which versions of Event Management System are affected by CVE-2026-2217?
CVE-2026-2217 affects version 1.0 of the itsourcecode Event Management System.
How can CVE-2026-2217 impact my application?
If exploited, CVE-2026-2217 can allow an attacker to execute arbitrary SQL commands, potentially exposing sensitive data or compromising system integrity.