CVE-2026-10811: itsourcecode Fees Management System receipt.php sql injection

Severity: medium (CVSS 6.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-06-04 · updated 2026-07-22
Weakness: CWE-74

Description

A security vulnerability has been detected in itsourcecode Fees Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /receipt.php. Such manipulation of the argument ef_id leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.

Affected products

itsourcecode Fees Management System: 1.0

References

https://github.com/ltranquility/submit/issues/16
https://itsourcecode.com/
https://vuldb.com/cve/CVE-2026-10811
https://vuldb.com/submit/835472
https://vuldb.com/vuln/368259
https://vuldb.com/vuln/368259/cti

Get alerted when CVE-2026-10811 or the next vulnerability affects your stack