CVE-2026-26891

The Sourcecodester Logistic Hub Parcel's Management System v1.0 is vulnerable to SQL Injection within the /manage_parcel_type.php file. This vulnerability allows for improper neutralization of special elements used in SQL commands, potentially leading to unauthorized database access or manipulati...

CVE-2026-26892

CVE-2026-26892 affects Sourcecodester Logistics Hub Parcel’s Management System v1.0, with SQL Injection in /manage_carrier.php. Documents confirm a network-accessible vulnerability impacting confidentiality, integrity, and availability (CVSSv3.1: C/H, I/H, A/H; AV:N/AC:L/PR:H/UI:N/S:U). No remedi...