CVE-2026-116101

The itsourcecode Online Cake Ordering System 1.0 is vulnerable to an SQL injection flaw within an unknown function in the /deletetransac.php file. An attacker can exploit this by manipulating the ID argument, which may be performed remotely. The documentation indicates that an exploit has been ma...

CVE-2026-116101 itsourcecode Online Cake Ordering System deletetransac.php sql injection

A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /deletetransac.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been made public and could ...

CVE-2026-114384 itsourcecode Online Cake Ordering System transactionsave.php sql injection

A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. Affected is an unknown function of the file /transactionsave.php. Such manipulation of the argument del leads to sql injection. The attack can be launched remotely. The exploit has been disclosed publicly...

CVE-2026-114384 itsourcecode Online Cake Ordering System transactionsave.php sql injection

A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. Affected is an unknown function of the file /transactionsave.php. Such manipulation of the argument del leads to sql injection. The attack can be launched remotely. The exploit has been disclosed publicly...

CVE-2026-114381 itsourcecode Online Cake Ordering System orderdetail.php sql injection

A vulnerability was determined in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /orderdetail.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been publicly...

CVE-2026-114381 itsourcecode Online Cake Ordering System orderdetail.php sql injection

A vulnerability was determined in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /orderdetail.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been publicly...

CVE-2026-114381

The itsourcecode Online Cake Ordering System 1.0 is vulnerable to a SQL injection vulnerability within an unknown function of the /orderdetail.php file. An attacker can perform a remote attack by manipulating the ID argument. The exploit has been publicly disclosed and may be utilized. No specifi...

CVE-2026-114380 itsourcecode Online Cake Ordering System inserttrans.php sql injection

A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. Impacted is an unknown function of the file /inserttrans.php. Performing a manipulation of the argument prcd results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and...

CVE-2026-114378

The itsourcecode Online Cake Ordering System 1.0 is vulnerable to an SQL injection in the /deleteproduct.php file. An attacker can manipulate the ID argument to execute unauthorized SQL commands. This vulnerability can be triggered remotely, and public exploits are currently available for use. No...

CVE-2026-114378 itsourcecode Online Cake Ordering System deleteproduct.php sql injection

A vulnerability was detected in itsourcecode Online Cake Ordering System 1.0. This affects an unknown part of the file /deleteproduct.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...

CVE-2026-114378 itsourcecode Online Cake Ordering System deleteproduct.php sql injection

A vulnerability was detected in itsourcecode Online Cake Ordering System 1.0. This affects an unknown part of the file /deleteproduct.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...

CVE-2026-113741 itsourcecode Online Cake Ordering System 404.php cross site scripting

A vulnerability has been found in itsourcecode Online Cake Ordering System 1.0. Affected by this issue is some unknown functionality of the file /404.php. Such manipulation of the argument useruid leads to cross site scripting. The attack may be performed from remote. The exploit has been disclos...

CVE-2026-113741

A cross-site scripting (XSS) vulnerability exists in the itsourcecode Online Cake Ordering System 1.0 . The flaw is located within an unknown functionality of the /404.php file, where manipulation of the useruid argument allows for the execution of malicious scripts. This attack can be performed ...

CVE-2026-113740 itsourcecode Online Cake Ordering System deletecustomer.php sql injection

A flaw has been found in itsourcecode Online Cake Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file /deletecustomer.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been...

CVE-2026-113740 itsourcecode Online Cake Ordering System deletecustomer.php sql injection

A flaw has been found in itsourcecode Online Cake Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file /deletecustomer.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been...

CVE-2026-113740

The itsourcecode Online Cake Ordering System 1.0 is vulnerable to a remote SQL injection flaw. The vulnerability exists in an unknown functionality within the /deletecustomer.php file, where manipulation of the ID argument allows for unauthorized database interaction. An exploit for this vulnerab...

Itsourcecode Online Cake Ordering System Cross-Site Script Vulnerabilities

The Itsourcecode Online Cake Ordering System 1.0 version has a security vulnerability. This vulnerability stems from incorrect handling of the parameter useruid in the file /404.php, which may lead to cross-site scripting attacks...

itsourcecode Online Cake Ordering System input validation error vulnerability

The 1.0 version of itsourcecode’s Online Cake Ordering System contains a security vulnerability stemming from improper handling of the ID parameter in the /deletecustomer.php file. This flaw may lead to SQL injection attacks that can be carried out remotely...

CVE-2026-112087 itsourcecode Online Cake Ordering System confirm.php sql injection

A weakness has been identified in itsourcecode Online Cake Ordering System 1.0. This issue affects some unknown processing of the file confirm.php. This manipulation of the argument cancel causes sql injection. The attack may be initiated remotely. The exploit has been made available to the publi...

CVE-2026-112087

A SQL injection vulnerability exists in the itsourcecode Online Cake Ordering System 1.0 . The flaw resides in the processing of the confirm.php file, where manipulation of the cancel argument allows for remote execution of malicious SQL commands. Public exploit code is available for this vulnera...