CVE-2026-10876— SourceCodester Ship Ferry Ticket Reservation System admin improper authorization
Affected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| SourceCodester | Ship Ferry Ticket Reservation System | 1.0 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-10876
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
SourceCodester Ship Ferry Ticket Reservation System admin improper authorization
Source: NVD (National Vulnerability Database)
Vulnerability Description
A weakness has been identified in SourceCodester Ship Ferry Ticket Reservation System 1.0. This affects an unknown function of the file /admin/. This manipulation of the argument page causes improper authorization. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Source: NVD (National Vulnerability Database)
Vulnerability Type
授权机制不恰当
Source: NVD (National Vulnerability Database)
Vulnerability Title
SourceCodester Ship Ferry Ticket Reservation System 授权问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
SourceCodester Ship Ferry Ticket Reservation System是SourceCodester开源的一个船票预订。 SourceCodester Ship Ferry Ticket Reservation System 1.0版本存在授权问题漏洞，该漏洞源于对/admin/文件中page参数操作不当，可能导致未授权访问。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| SourceCodester | Ship Ferry Ticket Reservation System | 1.0 | cpe:2.3:a:sourcecodester:ship_ferry_ticket_reservation_system:*:*:*:*:*:*:*:* |
II. Public POCs for CVE-2026-10876
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-10876
请登录查看更多情报信息。
Security Blog Posts for CVE-2026-10876 (1)
Other References for CVE-2026-10876 (1)
IV. Related Vulnerabilities
Same vendor: SourceCodester
- CVE-2026-16228
SourceCodester Class and Exam Timetabling System edit_school - CVE-2026-16227
SourceCodester Class and Exam Timetabling System edit_subjec - CVE-2026-16226
SourceCodester Pizzafy Ecommerce System admin_class_novo.php - CVE-2026-16203
SourceCodester Class and Exam Timetabling System forCYS.php - CVE-2026-16202
SourceCodester Class and Exam Timetabling System CYS.php cro
Same weakness: CWE-285
- CVE-2026-16224
jxxghp MoviePilot Application API improper authorization - CVE-2026-16199
nextlevelbuilder GoClaw credentialed_exec.go ExecTool.Execut - CVE-2026-16121
nextlevelbuilder GoClaw exec_approval.go isSafeBin improper - CVE-2024-58367
SurrealDB before 2.0.4 Improper Authorization via SELECT Per - CVE-2026-49977
tarteaucitron.js: data-cookie attribute can be used to delet
V. Comments for CVE-2026-10876
No comments yet