{"id":"CVE-2026-2177","state":"PUBLISHED","title":"SourceCodester Prison Management System Login session fixiation","description":"A vulnerability has been found in SourceCodester Prison Management System 1.0. The impacted element is an unknown function of the component Login. The manipulation leads to session fixiation. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.","publishedAt":"2026-02-08T19:02:09.135Z","updatedAt":"2026-02-23T09:47:29.826Z","severity":{"score":6.9,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","source":"VulDB"},"assigner":"VulDB","products":["SourceCodester Prison Management System"],"affected":[{"vendor":"SourceCodester","product":"Prison Management System","versions":[{"version":"1.0","status":"affected"}],"modules":["Login"]}],"references":["https://vuldb.com/?id.344880","https://vuldb.com/?ctiid.344880","https://vuldb.com/?submit.749485","https://github.com/hater-us/CVE/issues/10","https://www.sourcecodester.com/"],"weaknesses":["CWE-384"],"ingestedAt":"2026-10-29T20:11:31.369Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/2xxx/CVE-2026-2177.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-2177","state":"PUBLISHED","datePublished":"2026-02-08T19:02:09.135Z","dateUpdated":"2026-02-23T09:47:29.826Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2026-02-07T15:09:26.244Z"},"containers":{"cna":{"title":"SourceCodester Prison Management System Login session fixiation","descriptions":[{"lang":"en","value":"A vulnerability has been found in SourceCodester Prison Management System 1.0. The impacted element is an unknown function of the component Login. The manipulation leads to session fixiation. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used."}],"affected":[{"vendor":"SourceCodester","product":"Prison Management System","versions":[{"version":"1.0","status":"affected"}],"modules":["Login"]}],"references":[{"url":"https://vuldb.com/?id.344880","name":"VDB-344880 | SourceCodester Prison Management System Login session fixiation","tags":["vdb-entry"]},{"url":"https://vuldb.com/?ctiid.344880","name":"VDB-344880 | CTI Indicators (IOB, IOC)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/?submit.749485","name":"Submit #749485 | SourceCodester Prison Management System Using PHP V1.0 Session Fixiation","tags":["third-party-advisory"]},{"url":"https://github.com/hater-us/CVE/issues/10","tags":["exploit","issue-tracking"]},{"url":"https://www.sourcecodester.com/","tags":["product"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":7.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","baseSeverity":"HIGH"}},{"cvssV3_0":{"version":"3.0","baseScore":7.3,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","baseSeverity":"HIGH"}},{"cvssV2_0":{"version":"2.0","baseScore":7.5,"vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-384","type":"CWE","lang":"en","description":"Session Fixiation"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2026-02-23T09:47:29.826Z"},"timeline":[{"time":"2026-02-07T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2026-02-07T01:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2026-02-09T02:23:24.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"Hater (VulDB User)","type":"reporter"}],"tags":["x_freeware"]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-02-09T17:41:49.914443Z","id":"CVE-2026-2177","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-02-09T17:42:05.589Z"}}]}}}