CVE-2026-3153: itsourcecode Document Management System register.php sql injection
A vulnerability has been found in itsourcecode Document Management System 1.0. Impacted is an unknown function of the file /register.php. Such manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-3153?
CVE-2026-3153 is classified as a high severity vulnerability due to its potential for SQL injection attacks.
How do I fix CVE-2026-3153?
To fix CVE-2026-3153, sanitize user inputs in the register.php file and use prepared statements to prevent SQL injection.
What are the potential impacts of CVE-2026-3153?
The potential impacts of CVE-2026-3153 include unauthorized access to the database, data manipulation, and exposure of sensitive information.
Which version of the software is affected by CVE-2026-3153?
CVE-2026-3153 affects version 1.0 of the itsourcecode Document Management System.
Is there a way to test for CVE-2026-3153?
Yes, testing for CVE-2026-3153 can be done by attempting to manipulate the Username field in the register.php file to execute SQL queries.