CVE-2026-105169

Name of the Vulnerable Software and Affected Versions kishor-23 food-waste-management-system (affected versions not specified)

Description A security flaw exists in the Take Order Handler component within the file delivery/delivery.php. The issue allows for remote SQL injection, a technique where malicious SQL statements are inserted into entry fields for execution, by manipulating the order id or delivery person id arguments.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the delivery/delivery.php file or avoid using the order id and delivery person id parameters until a patch is available.