CVE-2026-114380

CVE-2026-114380 · itsourcecode Online Cake Ordering System inserttrans.php sql injection

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. Impacted is an unknown function of the file /inserttrans.php. Performing a manipulation of the argument prcd results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used.

CVSS 5.3 · Medium · EPSS 0.2%

Published: 2026-10-21T21:00:17.989Z
Updated: 2026-10-21T21:00:17.989Z

Affected products and versions

online cake ordering system
Versions
- 1.0: Affected
No fix published

Original sources

https://vuldb.com/vuln/424738
https://vuldb.com/vuln/424738/cti
https://vuldb.com/cve/CVE-2026-114380
https://vuldb.com/submit/1019763
https://github.com/sbbbsbbb/submit/issues/1
https://itsourcecode.com/
https://nvd.nist.gov/vuln/detail/CVE-2026-114380

Check your server →

CVE-2026-114380 · itsourcecode Online Cake Ordering System inserttrans.php sql injection

Affected products and versions

online cake ordering system

Original sources