CVE-2026-5330 in Best Courier Management System
Résumé (Anglaise)
A vulnerability was found in SourceCodester/mayuri_k Best Courier Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php?action=delete_user of the component User Delete Handler. Performing a manipulation of the argument ID results in improper access controls. The attack may be initiated remotely. The exploit has been made public and could be used.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Divulgation
02/04/2026
Statut
Confirmé
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 354664 | SourceCodester/mayuri_k Best Courier Management System User Delete ajax.php élévation de privilèges | 284 | Preuve de concept | Non défini | CVE-2026-5330 |