CVE-2026-5553 | itsourcecode Online Cellphone System 1.0 Parameter /cp/available.php Name sql injection

A vulnerability, which was classified as critical, was found in itsourcecode Online Cellphone System 1.0. Affected by this vulnerability is an unknown functionality of the file /cp/available.php of the component Parameter Handler. Such manipulation of the argument Name leads to sql injection.

This vulnerability is uniquely identified as CVE-2026-5553. The attack can be launched remotely. Moreover, an exploit is present.