← CVE Intelligence

CVE-2026-1688

itsourcecode Directory Management System index.php sql injection PUBLISHED

Description (CNA)

A security vulnerability has been detected in itsourcecode Directory Management System 1.0. The affected element is an unknown function of the file /admin/index.php. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.

Affected (CNA)

Vendor / productVersions
itsourcecode / Directory Management Systemaffected 1.0

CWE

CWE-89, CWE-74

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.