Directory Management System vulnerabilities

2 known vulnerabilities in Directory Management System from itsourcecode. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Directory Management System: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2026-2161Feb 8, 2026itsourcecode

  A vulnerability was found in itsourcecode Directory Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/forget-password.php. The manipulation of the argument email results in sql injection. The attack can be launched

• 9.8 Critical severity

  Directory Management System: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-1688Jan 30, 2026itsourcecode

  A security vulnerability has been detected in itsourcecode Directory Management System 1.0. The affected element is an unknown function of the file /admin/index.php. The manipulation of the argument Username leads to sql injection. The attack can be initiated