CVE-2026-2161: SQL Injection in Directory Management System
CVE-2026-2161 is a SQL injection in itsourcecode Directory Management System 1.0 (CVSS 7.3). No fix is listed, so isolate the app and parameterize queries.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
CVE-2026-2161 is a SQL injection in itsourcecode Directory Management System 1.0 (CVSS 7.3). No fix is listed, so isolate the app and parameterize queries.
CVE-2026-2136 is a SQL injection in projectworlds Online Food Ordering System 1.0 (CVSS 7.3). No fix is listed, so isolate it and parameterize queries.
CVE-2026-2133 is an unrestricted file upload in code-projects Online Music Site 1.0 (CVSS 7.3). No fix is listed, so isolate the app and lock down uploads.
CVE-2026-2132 is a SQL injection in code-projects Online Music Site 1.0 (CVSS 7.3). No fix is listed, so isolate the app and parameterize queries.
CVE-2026-2122 is a SQL injection in the WAF component of Xiaopi Panel up to 20260126 (CVSS 6.3). No fix is listed, so restrict access and review the code.
CVE-2026-2117 is a SQL injection in the activity edit page of itsourcecode Society Management System 1.0 (CVSS 7.3). No fix is listed, so isolate it.
CVE-2026-2116 is a SQL injection in the expense edit page of itsourcecode Society Management System 1.0 (CVSS 7.3). No fix is listed, so isolate it.
CVE-2026-2115 is a SQL injection in the expense delete page of itsourcecode Society Management System 1.0 (CVSS 7.3). No fix is listed, so isolate it.
CVE-2026-2114 is a SQL injection in itsourcecode Society Management System 1.0 (CVSS 7.3). No fix is listed, so isolate the app and parameterize queries.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.