CVE-2026-7077: itsourcecode Courier Management System edit_parcel.php sql injection
A vulnerability was identified in itsourcecode Courier Management System 1.0. The affected element is an unknown function of the file /edit_parcel.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7077?
CVE-2026-7077 has a high severity rating due to the potential for SQL injection attacks that could compromise the database.
How do I fix CVE-2026-7077?
To fix CVE-2026-7077, validate and sanitize all user inputs in the edit_parcel.php file to prevent SQL injection.
What systems are affected by CVE-2026-7077?
CVE-2026-7077 affects itsourcecode Courier Management System version 1.0.
What kind of attacks can be executed due to CVE-2026-7077?
CVE-2026-7077 allows attackers to execute unauthorized SQL statements, potentially leading to data leakage or manipulation.
Is there a patch available for CVE-2026-7077?
As of now, there is no official patch released for CVE-2026-7077, so immediate remediation measures should be taken.