PT-2026-104657 · Unknown · Food-Waste-Management-System

·

CVE-2026-105168

·

تاريخ النشر

2026-10-04

·

تاريخ التحديث

2026-10-05

CVSS v2.0

6.5

متوسطة

المتجهAV:N/AC:L/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions kishor-23 food-waste-management-system (affected versions not specified)
Description An issue exists in the Order Assignment Block component within the admin/admin.php file. Remote manipulation of the order id or delivery person id arguments can lead to SQL injection, a technique where malicious SQL statements are inserted into entry fields for execution.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the admin/admin.php file to minimize the risk of exploitation.

استغلال

SQL injection

Special Elements Injection

وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾

تصنيف نقاط الضعف

المعرّفات ذات الصلة

CVE-2026-105168

المنتجات المتأثرة

Food-Waste-Management-System