13 matches found
CVE-2026-114378
A vulnerability was detected in itsourcecode Online Cake Ordering System 1.0. This affects an unknown part of the file /deleteproduct.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...
CVE-2026-114378 itsourcecode Online Cake Ordering System deleteproduct.php sql injection
A vulnerability was detected in itsourcecode Online Cake Ordering System 1.0. This affects an unknown part of the file /deleteproduct.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...
CVE-2026-114378
The itsourcecode Online Cake Ordering System 1.0 is vulnerable to an SQL injection in the /deleteproduct.php file. An attacker can manipulate the ID argument to execute unauthorized SQL commands. This vulnerability can be triggered remotely, and public exploits are currently available for use. No...
EUVD-2026-107554
A vulnerability was detected in itsourcecode Online Cake Ordering System 1.0. This affects an unknown part of the file /deleteproduct.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...
CVE-2026-9444 SourceCodester Simple POS and Inventory System GET Parameter deleteproduct.php delete sql injection
A vulnerability was detected in SourceCodester Simple POS and Inventory System 1.0. This issue affects the function delete of the file /admin/deleteproduct.php of the component GET Parameter Handler. The manipulation of the argument ID results in sql injection. The attack may be launched remotely...
CVE-2026-9444: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was detected in SourceCodester Simple POS and Inventory System 1.0. This issue affects the function delete of the file /admin/deleteproduct.php of the component GET Parameter Handler. The manipulation of the argument ID results in sql injection. The attack may be launched remotely...
EUVD-2023-50786
Malicious code in bioql PyPI...
CVE-2023-46582
SQL injection vulnerability in Inventory Management v.1.0 allows a local attacker to execute arbitrary SQL commands via the id paramter in the deleteProduct.php component...
Sql injection
SQL injection vulnerability in Inventory Management v.1.0 allows a local attacker to execute arbitrary SQL commands via the id paramter in the deleteProduct.php component...
CVE-2023-46582
SQL injection vulnerability in Inventory Management v.1.0 allows a local attacker to execute arbitrary SQL commands via the id paramter in the deleteProduct.php component...
CVE-2023-46582: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Inventory Management v.1.0 allows a local attacker to execute arbitrary SQL commands via the id paramter in the deleteProduct.php component...
PT-2023-30100
Name of the Vulnerable Software and Affected Versions Inventory Management version 1.0 Description The issue allows a local attacker to execute arbitrary SQL commands via the id parameter in the "deleteProduct.php" component. This can lead to unauthorized data access and modification...
