CVE-2026-2867: itsourcecode Vehicle Management System billaction.php sql injection
A vulnerability was determined in itsourcecode Vehicle Management System 1.0. Affected is an unknown function of the file /billaction.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2867?
CVE-2026-2867 is considered a high-severity vulnerability due to its potential for SQL injection.
How can I fix CVE-2026-2867?
To fix CVE-2026-2867, it is recommended to sanitize and validate all inputs in the billaction.php file.
What is the impact of exploiting CVE-2026-2867?
Exploiting CVE-2026-2867 may allow attackers to manipulate the database through unauthorized SQL queries.
Which software is affected by CVE-2026-2867?
CVE-2026-2867 affects itsourcecode Vehicle Management System version 1.0.
Where in the software does CVE-2026-2867 occur?
CVE-2026-2867 occurs in the billaction.php file during the handling of the ID parameter.