CVE-2026-114378

CVE-2026-114378 · itsourcecode Online Cake Ordering System deleteproduct.php sql injection

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A vulnerability was detected in itsourcecode Online Cake Ordering System 1.0. This affects an unknown part of the file /deleteproduct.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public and may be used.

CVSS 5.3 · Medium · EPSS 0.2%

Published: 2026-10-21T20:30:18.507Z
Updated: 2026-10-23T21:19:18.865Z

Affected products and versions

online cake ordering system
Versions
- 1.0: Affected
No fix published

Original sources

https://vuldb.com/vuln/424735
https://vuldb.com/vuln/424735/cti
https://vuldb.com/cve/CVE-2026-114378
https://vuldb.com/submit/1019507
https://github.com/li986389855-byte/submit/issues/1
https://itsourcecode.com/
https://nvd.nist.gov/vuln/detail/CVE-2026-114378

Check your server →

CVE-2026-114378 · itsourcecode Online Cake Ordering System deleteproduct.php sql injection

Affected products and versions

online cake ordering system

Original sources