CVE-2026-82610

Name of the Vulnerable Software and Affected Versions itsourcecode Online Medicine Delivery System version 1.0

Description A SQL injection flaw exists in the Login Interface component within the /rider/login.php file. The issue occurs in the Employee::employeeAuthentication() function when processing the emp email variable, allowing a remote attacker to manipulate database queries.

Recommendations As a temporary workaround, restrict access to the /rider/login.php endpoint or avoid using the emp email parameter until a fix is applied. At the moment, there is no information about a newer version that contains a fix for this vulnerability.