Executive brief
The Computer Repair Shop Management System, a web application used to manage repair business operations, contains a security flaw that allows unauthorized access to its database. An attacker can exploit this to view, modify, or delete sensitive business information, including product lists and customer data. This vulnerability can be exploited remotely without needing a username or password, potentially leading to a complete compromise of the system's data integrity and confidentiality.
Technical details
A SQL injection vulnerability exists in SourceCodester Computer Repair Shop Management System v1.0 within the '/admin/products/manage_product.php' file. The application fails to sanitize the 'id' GET parameter before using it in a raw SQL query: "SELECT * from product_list where id = '{$_GET['id']}'". This lack of prepared statements allows an unauthenticated remote attacker to inject malicious SQL commands. Successful exploitation, confirmed via automated tools like sqlmap, enables the attacker to perform boolean-based blind, error-based, and time-based blind injections to enumerate databases, extract table data, and potentially gain full control over the backend MySQL database.
Affected products
- SourceCodester Computer Repair Shop Management System 1.0
Timeline
- 2026-05-10: disclosed: Vulnerability discovered and reported on GitHub by gxcyyjy.
- 2026-06-01: advisory: CVE-2026-10263 published.