CVE-2026-10252

A security vulnerability has been detected in itsourcecode Online House Rental System 1.0. This affects an unknown function of the file /manage_tenant.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.

• CWE-74
• CWE-89

• https://github.com/zhengdexu-bot/zhengdexu/issues/4
• https://itsourcecode.com/
• https://vuldb.com/cve/CVE-2026-10252
• https://vuldb.com/submit/824096
• https://vuldb.com/vuln/367530
• https://vuldb.com/vuln/367530/cti

Published

Jun 1, 2026

Last Modified

Jul 22, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-102508Improper Verification of Cryptographic Signature and Imprope…9.2
• CVE-2026-102509Memory Allocation with Excessive Size Value, Allocation of R…8.7
• CVE-2026-10251A weakness has been identified in itsourcecode Online House …7.3
• CVE-2026-102510Integer Overflow, Improper Validation of Array Index, Uncont…8.7
• CVE-2026-102511Improper Verification of Source of a Communication Channel i…8.5
• CVE-2026-102514Out-of-bounds Write (CWE-787) in the PEA archive extraction …8.4
• CVE-2026-102521The decoder in `readFromDataView` in lib0 before 0.2.119 can…8.6
• CVE-2026-102523MariaDB server is a community developed fork of MySQL server…8
• CVE-2026-102527Nuxt OG Image generates OG Images with Vue templates in Nuxt…6.9
• CVE-2026-10253A vulnerability was detected in itsourcecode Online House Re…7.3
• CVE-2026-102530JupyterLab Desktop is the cross-platform desktop application…9.4
• CVE-2026-102536Rejected reason: This CVE has been rejected because it was i…