CVE-2026-10237

🗓️ 01 Jun 2026 07:45:08Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 8 Views🌐 WEB

Vulnerability in SourceCodester Water Billing System enables database query language injection.

Reporter	Title	Published	Views	Family All 7
ATTACKERKB	CVE-2026-10237	1 Jun 202607:45	–	attackerkb
CNNVD	SourceCodester Water Billing Management System SQL Injection Vulnerability	1 Jun 202600:00	–	cnnvd
Cvelist	CVE-2026-10237 SourceCodester Water Billing Management System User Management manage_user sql injection	1 Jun 202607:45	–	cvelist
EUVD	EUVD-2026-33582	1 Jun 202607:45	–	euvd
NVD	CVE-2026-10237	1 Jun 202609:16	–	nvd
Positive Technologies	PT-2026-45347	1 Jun 202600:00	–	ptsecurity
Vulnrichment	CVE-2026-10237 SourceCodester Water Billing Management System User Management manage_user sql injection	1 Jun 202607:45	–	vulnrichment

Vulners

Node

sourcecodester water_billing_management_systemMatch1.0

[
  {
    "vendor": "SourceCodester",
    "product": "Water Billing Management System",
    "versions": [
      {
        "version": "1.0",
        "status": "affected"
      }
    ],
    "cpes": [
      "cpe:2.3:a:sourcecodester:water_billing_management_system:*:*:*:*:*:*:*:*"
    ],
    "modules": [
      "User Management Module"
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/cve/CVE-2026-10237
vuldb	www.vuldb.com/vuln/367516/cti
vuldb	www.vuldb.com/submit/823145
vuldb	www.vuldb.com/vuln/367516
sourcecodester	www.sourcecodester.com/
github	www.github.com/renzortega1337/Security-Research-/blob/main/Authenticated%20SQL%20Injection%20in%20User%20Management.md

Parameter	Position	Path	Description	CWE
id	query param	/admin/?page=user/manage_user	SQL injection via manipulation of the id parameter in /admin/?page=user/manage_user	CWE-89, CWE-74

01 Jun 2026 15:15Current

5.6Medium risk

Vulners AI Score5.6

CVSS 3.14.7

CVSS 45.1

CVSS 25.8

CVSS 34.7

EPSS0.00032

SSVC