CVE-2026-82613

Name of the Vulnerable Software and Affected Versions itsourcecode Online Medicine Delivery System version 1.0

Description An issue exists in the Product Search Interface component within the /index.php?q=product file. A remote attacker can perform a manipulation of the Search variable in the loadResultList() function, leading to a SQL injection. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution, potentially allowing unauthorized access to the database.

Recommendations As a temporary workaround, restrict access to the loadResultList() function in the /index.php?q=product file or avoid using the Search parameter until a fix is applied. At the moment, there is no information about a newer version that contains a fix for this vulnerability.