CVE-2026-10237

MediumCVSS 4.7

Published: 01/06/2026(UTC)Updated: 22/07/2026(UTC)Translated: 23/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.26%

18th percentile - higher than 18% of all known CVEs

Summary

SourceCodester Water Billing Management System 1.0 has an SQL injection vulnerability in /admin/?page=user/manage_user via the ID argument.

Risk Assessment

An attacker can remotely manipulate the database, leading to data leakage or modification.

Recommendation

Apply input filtering or use prepared statements; consider updating the system.

Other vulnerabilities in SourceCodester Water Billing Management System

CVE-2026-10236High
A vulnerability in SourceCodester Water Billing Management System 1.0 affects unknown processing in the file /classes/Users.php?f=save of the User Management Endpoint component, leading to improper authorization. The attack can be launched remotely and the exploit has been disclosed publicly.

Original NVD description (English source)

A vulnerability was found in SourceCodester Water Billing Management System 1.0. Impacted is an unknown function of the file /admin/?page=user/manage_user of the component User Management Module. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS