CVE-2026-2690: itsourcecode Event Management System Admin Login ajax.php sql injection
A flaw has been found in itsourcecode Event Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/ajax.php?action=login of the component Admin Login. This manipulation of the argument Username causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2690?
CVE-2026-2690 has been classified as a medium severity SQL injection vulnerability.
How do I fix CVE-2026-2690?
To address CVE-2026-2690, update the itsourcecode Event Management System to the latest version that includes the security patch.
What components are affected by CVE-2026-2690?
CVE-2026-2690 affects the Admin Login functionality within the ajax.php file of the itsourcecode Event Management System.
Can CVE-2026-2690 lead to data breaches?
Yes, CVE-2026-2690 can potentially allow attackers to execute arbitrary SQL queries, which may lead to data breaches.
Is CVE-2026-2690 remotely exploitable?
CVE-2026-2690 is remotely exploitable, allowing attackers to exploit the vulnerability without direct access to the system.