Description
A vulnerability was identified in itsourcecode Content Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/edit_topic.php. Such manipulation of the argument topic_id leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used.
Published: 2026-06-01
Score: 5.3 Medium
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A flaw in the page /admin/edit_topic.php causes the topic_id parameter to be incorporated into an SQL statement without proper sanitization. This vulnerability can be triggered by a remote attacker through crafted requests, allowing execution of arbitrary SQL commands. The weakness is reflected in CWE‑74 and CWE‑89, and permits attackers to read, modify, or delete database content, compromising confidentiality, integrity, and availability of the site.

Affected Systems

The vulnerability affects itsourcecode Content Management System version 1.0. No additional patch‑level information is available in the data, so any installation of this CMS is potentially vulnerable unless an updated release has been applied.

Risk and Exploitability

The CVSS score of 5.3 indicates a medium severity overall. EPSS information is not provided, and the issue is not listed in CISA’s KEV catalog. The attack can be launched remotely via crafted HTTP requests to the admin interface, and the exploit has been reported as publicly available, suggesting that an attacker could employ existing scripts or tools to target the vulnerable administrator pages.

Generated by OpenCVE AI on June 1, 2026 at 16:22 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade to the latest version of the itsourcecode Content Management System that incorporates the fix for edit_topic.php.
  • Restrict access to the /admin area to trusted administrators only, using network or application‑level controls.
  • Implement input validation on the topic_id parameter to ensure only numeric values are accepted, and enforce the use of parameterized queries or prepared statements to eliminate SQL injection vectors.

Generated by OpenCVE AI on June 1, 2026 at 16:22 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 01 Jun 2026 20:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 01 Jun 2026 15:00:00 +0000

Type Values Removed Values Added
Description A vulnerability was identified in itsourcecode Content Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/edit_topic.php. Such manipulation of the argument topic_id leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used.
Title itsourcecode Content Management System edit_topic.php sql injection
First Time appeared Itsourcecode
Itsourcecode content Management System
Weaknesses CWE-74
CWE-89
CPEs cpe:2.3:a:itsourcecode:content_management_system:*:*:*:*:*:*:*:*
Vendors & Products Itsourcecode
Itsourcecode content Management System
References
Metrics cvssV2_0

{'score': 6.5, 'vector': 'AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 6.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 6.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 5.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Itsourcecode Content Management System
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-06-01T19:27:58.676Z

Reserved: 2026-05-31T12:52:21.524Z

Link: CVE-2026-10265

cve-icon Vulnrichment

Updated: 2026-06-01T19:27:48.799Z

cve-icon NVD

Status : Deferred

Published: 2026-06-01T15:16:33.010

Modified: 2026-06-01T16:41:55.090

Link: CVE-2026-10265

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-06-01T16:30:06Z

Weaknesses