CVE-2026-7592

HighCVSS 7.3

Published: 01/05/2026(UTC)Updated: 26/10/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.26%

18th percentile - higher than 18% of all known CVEs

Summary

A weakness has been identified in itsourcecode Courier Management System 1.0, affecting an unknown function of the file /edit_staff.php. Manipulating the ID argument can lead to SQL injection.

Risk Assessment

An attacker may remotely exploit this vulnerability, posing a serious threat to the security of the organization's data.

Recommendation

It is recommended to immediately update the system to the latest version and implement additional security measures to protect against SQL injections.

Other vulnerabilities in itsourcecode Courier Management System 1.0

CVE-2026-7612Medium
A vulnerability was determined in itsourcecode Courier Management System 1.0 in an unknown function of the file /edit_user.php. Manipulation of the argument ID can lead to SQL injection, and the attack may be performed remotely. The exploit has been publicly disclosed and may be utilized.

Original NVD description (English source)

A weakness has been identified in itsourcecode Courier Management System 1.0. This affects an unknown function of the file /edit_staff.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS