Threat database

A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. Affected is an unknown function of the file /transactionsave.php. Such manipulation of the argument del leads to sql injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.

A vulnerability was determined in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /orderdetail.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.

CVE-2026-114380 is a medium severity SQL injection vulnerability in itsourcecode Online Cake Ordering System version 1.0. The flaw exists in the /inserttrans.php file where manipulation of the 'prcd' argument allows remote attackers to perform SQL injection. Exploit code has been publicly disclosed, but no known active exploitation in the wild has been reported. No patch or remediation information is currently available.

A vulnerability was detected in itsourcecode Online Cake Ordering System 1.0. This affects an unknown part of the file /deleteproduct.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public and may be used.

CVE-2026-114252 is a medium severity SQL injection vulnerability in the itsourcecode Sales-and-Inventory-System. The flaw exists in an unknown function within the /pages/cust_searchfrm.php file, where manipulation of the ID argument can lead to SQL injection. The vulnerability can be exploited remotely without user interaction. The project uses a rolling release model, so specific affected or fixed versions are not clearly identified. The issue was reported early but has not yet been addressed by the vendor. Public exploit code is available, increasing the risk of exploitation.

A vulnerability has been found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. Impacted is an unknown function of the file /pages/cust_del.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The project was informed of the problem early through an issue report but has not responded yet.

CVE-2026-114250 is a medium-severity SQL injection vulnerability in the itsourcecode Sales-and-Inventory-System. The flaw exists in the processing of the ID argument in the /pages/cust_edit.php file, allowing remote attackers to manipulate SQL queries. The product uses continuous delivery with rolling releases, so no specific affected or fixed versions are identified. The vulnerability was reported early, but the vendor has not responded or issued a fix. Exploit code has been published, but no known in-the-wild exploitation is confirmed.

A vulnerability has been found in itsourcecode Online Cake Ordering System 1.0. Affected by this issue is some unknown functionality of the file /404.php. Such manipulation of the argument useruid leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.

A flaw has been found in itsourcecode Online Cake Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file /deletecustomer.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used.

A weakness has been identified in itsourcecode Online Cake Ordering System 1.0. This issue affects some unknown processing of the file confirm.php. This manipulation of the argument cancel causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks.

CVE-2026-108959 is a medium severity SQL injection vulnerability in itsourcecode Online Cake Ordering System version 1.0. The flaw exists in the /addtransacdetail.php file where manipulation of the ID argument allows remote attackers to perform SQL injection. The vulnerability has been publicly disclosed but no official patch or fix information is provided.

CVE-2026-108928 is a medium severity SQL injection vulnerability in itsourcecode Online Admission System version 1.0. The flaw exists in the /admin/sum.php file where manipulation of the ID parameter allows remote attackers to execute SQL injection attacks. The vulnerability has been publicly disclosed, but no official patch or fix information is currently available.

CVE-2026-108927 is a SQL injection vulnerability in itsourcecode Baptism Information Management System version 1.0. The flaw exists in the pbaptism.php file where manipulation of the b_id argument allows remote attackers to perform SQL injection. The vulnerability has a medium severity score of 5.3 and an exploit is publicly available.

CVE-2026-108926 is a medium severity SQL injection vulnerability in itsourcecode Baptism Information Management System version 1.0. The flaw exists in the ebaptism.php file where the ID parameter can be manipulated remotely to perform SQL injection. Public exploit code is available, increasing the risk of exploitation.

CVE-2026-105254 is a medium severity SQL injection vulnerability in itsourcecode Online Admission System version 1.0. The flaw exists in an unknown function within the /admin/schoolyear.php file, where manipulation of the 'sy' argument can lead to SQL injection. The vulnerability can be exploited remotely without user interaction. Public exploit code is available, but no official patch or remediation guidance has been provided.

A vulnerability was determined in itsourcecode Online Admission System Project 1.0. This issue affects some unknown processing of the file /admin/login1.php. This manipulation of the argument User causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.

A vulnerability has been found in itsourcecode Online Admission System 1.0. Affected is an unknown function of the file /admin/key.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

CVE-2026-105186 is a medium severity SQL injection vulnerability in itsourcecode Online Admission System version 1.0. The flaw exists in the /new.php file where manipulation of the schedid argument can lead to SQL injection. The vulnerability can be exploited remotely without user interaction. An exploit has been published but there are no known reports of active exploitation in the wild. No patch or remediation information is currently available.

A vulnerability was detected in itsourcecode Online Admission System 1.0. This affects an unknown function of the file /admin/examinee.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit is now public and may be used.

A security vulnerability has been detected in itsourcecode Online Admission System 1.0. The impacted element is an unknown function of the file /admin/creteria.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.