CVE-2026-5330 in Best Courier Management System
Summary
A vulnerability was found in SourceCodester/mayuri_k Best Courier Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php?action=delete_user of the component User Delete Handler. Performing a manipulation of the argument ID results in improper access controls. The attack may be initiated remotely. The exploit has been made public and could be used.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Disclosure
04/02/2026
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 354664 | SourceCodester/mayuri_k Best Courier Management System User Delete ajax.php access control | 284 | Proof-of-Concept | Not defined | CVE-2026-5330 |