CVE-2026-0843

The CVE-2026-0843 entry applies to jjjfood and jjjshop_food (up to 20260103) from jiujiujia/victor123/wxw850227, with a SQL injection in /index.php/api/product.category/index. The root cause is manipulation of the latitude parameter enabling remote exploitation. Public disclosures exist and explo...

Jiujiujia jjjshop_food_php SQL injection vulnerability

jiujiujia jjjshopfoodphp is a restaurant chain ordering software from China's Jiu Jiu Jia jiujiujia company. A SQL injection vulnerability exists in jiujiujia jjjshopfoodphp 20260103 and earlier versions, which stems from incorrect manipulation of the parameter latitude in the file...