CVE-2026-114384

Publié : 21 octobre 2026

Modifié : 21 octobre 2026

Score CVSS

6.3

MEDIUM

Description détaillée

A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. Affected is an unknown function of the file /transactionsave.php. Such manipulation of the argument del leads to sql injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Références et Patchs

https://github.com/ckkkkj/submit/issues/1 https://itsourcecode.com/https://vuldb.com/cve/CVE-2026-114384 https://vuldb.com/submit/1019951 https://vuldb.com/vuln/424743 https://vuldb.com/vuln/424743/cti

Dernières Vulnérabilités

CVE-2026-96398

Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

VOIR DÉTAILS

CVE-2026-96392

Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal AI CKEditor allows Code Injection. This issue affects AI CKEditor versions: from 0.0.0 to 1.4.3.

VOIR DÉTAILS

CVE-2026-96391

Missing Authorization vulnerability in Drupal Webform REST allows Forceful Browsing. This issue affects Webform REST versions: from 0.0.0 to 4.2.1.

VOIR DÉTAILS