Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
24 vulnerabilities by kishor-23
CVE-2026-105233 (GCVE-0-2026-105233)
Vulnerability from nvd – Published: 2026-10-05 05:45 – Updated: 2026-10-05 05:45
VLAI
EPSS
VEX
Title
kishor-23 food-waste-management-system Login Flow login.php session fixiation
Summary
A vulnerability has been found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This affects an unknown function of the file login.php of the component Login Flow. Such manipulation of the argument PHPSESSID leads to session fixiation. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The project was informed of the problem early through an issue report but has not responded yet.
Severity
CWE
- CWE-384 - Session Fixiation
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/413433 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/413433/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-105233 | third-party-advisory |
| https://vuldb.com/submit/972904 | third-party-advisory |
| https://github.com/kishor-23/food-waste-managemen… | exploitissue-tracking |
| https://github.com/kishor-23/food-waste-managemen… | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| kishor-23 | food-waste-management-system |
Affected:
411989e3ecb82895e53dca7865f72145f03d7d93
Affected: b3a70b2c492dc9904de5be1ad9389bd79b87f82c cpe:2.3:a:kishor-23:food-waste-management-system:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:kishor-23:food-waste-management-system:*:*:*:*:*:*:*:*"
],
"modules": [
"Login Flow"
],
"product": "food-waste-management-system",
"vendor": "kishor-23",
"versions": [
{
"status": "affected",
"version": "411989e3ecb82895e53dca7865f72145f03d7d93"
},
{
"status": "affected",
"version": "b3a70b2c492dc9904de5be1ad9389bd79b87f82c"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "liaoxijun10086 (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This affects an unknown function of the file login.php of the component Login Flow. Such manipulation of the argument PHPSESSID leads to session fixiation. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 7.5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-384",
"description": "Session Fixiation",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-05T05:45:09.492Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-413433 | kishor-23 food-waste-management-system Login Flow login.php session fixiation",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/413433"
},
{
"name": "VDB-413433 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/413433/cti"
},
{
"name": "CVE-2026-105233 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-105233"
},
{
"name": "Submit #972904 | kishor-23 food-waste-management-system food-waste-management-system Session Fixiation",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/972904"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/kishor-23/food-waste-management-system/issues/16"
},
{
"tags": [
"product"
],
"url": "https://github.com/kishor-23/food-waste-management-system/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-10-04T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-10-04T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-10-04T16:09:13.000Z",
"value": "VulDB entry last update"
}
],
"title": "kishor-23 food-waste-management-system Login Flow login.php session fixiation",
"x_generator": [
"VulDB PVTS v202610"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-105233",
"datePublished": "2026-10-05T05:45:09.492Z",
"dateReserved": "2026-10-04T13:58:25.026Z",
"dateUpdated": "2026-10-05T05:45:09.492Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-105232 (GCVE-0-2026-105232)
Vulnerability from nvd – Published: 2026-10-05 05:30 – Updated: 2026-10-05 05:30
VLAI
EPSS
VEX
Title
kishor-23 food-waste-management-system Registration deliverysignup.php sql injection
Summary
A flaw has been found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The impacted element is an unknown function of the file delivery/deliverysignup.php of the component Registration Page. This manipulation of the argument username/email/location causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.
Severity
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/413432 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/413432/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-105232 | third-party-advisory |
| https://vuldb.com/submit/972903 | third-party-advisory |
| https://github.com/kishor-23/food-waste-managemen… | exploitissue-tracking |
| https://github.com/kishor-23/food-waste-managemen… | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| kishor-23 | food-waste-management-system |
Affected:
411989e3ecb82895e53dca7865f72145f03d7d93
Affected: b3a70b2c492dc9904de5be1ad9389bd79b87f82c cpe:2.3:a:kishor-23:food-waste-management-system:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:kishor-23:food-waste-management-system:*:*:*:*:*:*:*:*"
],
"modules": [
"Registration Page"
],
"product": "food-waste-management-system",
"vendor": "kishor-23",
"versions": [
{
"status": "affected",
"version": "411989e3ecb82895e53dca7865f72145f03d7d93"
},
{
"status": "affected",
"version": "b3a70b2c492dc9904de5be1ad9389bd79b87f82c"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "liaoxijun10086 (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A flaw has been found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The impacted element is an unknown function of the file delivery/deliverysignup.php of the component Registration Page. This manipulation of the argument username/email/location causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 7.5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "SQL Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-74",
"description": "Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-05T05:30:13.427Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-413432 | kishor-23 food-waste-management-system Registration deliverysignup.php sql injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/413432"
},
{
"name": "VDB-413432 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/413432/cti"
},
{
"name": "CVE-2026-105232 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-105232"
},
{
"name": "Submit #972903 | kishor-23 food-waste-management-system b3a70b2c492dc9904de5be1ad9389bd79b87f82c SQL Injection",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/972903"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/kishor-23/food-waste-management-system/issues/14"
},
{
"tags": [
"product"
],
"url": "https://github.com/kishor-23/food-waste-management-system/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-10-04T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-10-04T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-10-04T16:03:44.000Z",
"value": "VulDB entry last update"
}
],
"title": "kishor-23 food-waste-management-system Registration deliverysignup.php sql injection",
"x_generator": [
"VulDB PVTS v202610"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-105232",
"datePublished": "2026-10-05T05:30:13.427Z",
"dateReserved": "2026-10-04T13:58:21.548Z",
"dateUpdated": "2026-10-05T05:30:13.427Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-105231 (GCVE-0-2026-105231)
Vulnerability from nvd – Published: 2026-10-05 05:15 – Updated: 2026-10-05 05:15
VLAI
EPSS
VEX
Title
kishor-23 food-waste-management-system Admin Registration signup.php sql injection
Summary
A vulnerability was detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The affected element is an unknown function of the file admin/signup.php of the component Admin Registration. The manipulation of the argument email/username/location results in sql injection. It is possible to launch the attack remotely. The exploit is now public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The project was informed of the problem early through an issue report but has not responded yet.
Severity
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/413431 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/413431/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-105231 | third-party-advisory |
| https://vuldb.com/submit/972898 | third-party-advisory |
| https://github.com/kishor-23/food-waste-managemen… | exploitissue-tracking |
| https://github.com/kishor-23/food-waste-managemen… | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| kishor-23 | food-waste-management-system |
Affected:
411989e3ecb82895e53dca7865f72145f03d7d93
Affected: b3a70b2c492dc9904de5be1ad9389bd79b87f82c cpe:2.3:a:kishor-23:food-waste-management-system:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:kishor-23:food-waste-management-system:*:*:*:*:*:*:*:*"
],
"modules": [
"Admin Registration"
],
"product": "food-waste-management-system",
"vendor": "kishor-23",
"versions": [
{
"status": "affected",
"version": "411989e3ecb82895e53dca7865f72145f03d7d93"
},
{
"status": "affected",
"version": "b3a70b2c492dc9904de5be1ad9389bd79b87f82c"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "liaoxijun10086 (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The affected element is an unknown function of the file admin/signup.php of the component Admin Registration. The manipulation of the argument email/username/location results in sql injection. It is possible to launch the attack remotely. The exploit is now public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 7.5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "SQL Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-74",
"description": "Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-05T05:15:17.185Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-413431 | kishor-23 food-waste-management-system Admin Registration signup.php sql injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/413431"
},
{
"name": "VDB-413431 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/413431/cti"
},
{
"name": "CVE-2026-105231 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-105231"
},
{
"name": "Submit #972898 | kishor-23 food-waste-management-system b3a70b2c492dc9904de5be1ad9389bd79b87f82c SQL Injection",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/972898"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/kishor-23/food-waste-management-system/issues/15"
},
{
"tags": [
"product"
],
"url": "https://github.com/kishor-23/food-waste-management-system/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-10-04T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-10-04T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-10-04T16:09:08.000Z",
"value": "VulDB entry last update"
}
],
"title": "kishor-23 food-waste-management-system Admin Registration signup.php sql injection",
"x_generator": [
"VulDB PVTS v202610"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-105231",
"datePublished": "2026-10-05T05:15:17.185Z",
"dateReserved": "2026-10-04T13:58:17.967Z",
"dateUpdated": "2026-10-05T05:15:17.185Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-105230 (GCVE-0-2026-105230)
Vulnerability from nvd – Published: 2026-10-05 05:00 – Updated: 2026-10-05 05:00
VLAI
EPSS
VEX
Title
kishor-23 food-waste-management-system deliverymyord.php sql injection
Summary
A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Impacted is an unknown function of the file delivery/deliverymyord.php. The manipulation of the argument delivery_person_id/order_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.
Severity
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/413430 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/413430/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-105230 | third-party-advisory |
| https://vuldb.com/submit/972895 | third-party-advisory |
| https://github.com/kishor-23/food-waste-managemen… | exploitissue-tracking |
| https://github.com/kishor-23/food-waste-managemen… | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| kishor-23 | food-waste-management-system |
Affected:
411989e3ecb82895e53dca7865f72145f03d7d93
Affected: b3a70b2c492dc9904de5be1ad9389bd79b87f82c cpe:2.3:a:kishor-23:food-waste-management-system:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:kishor-23:food-waste-management-system:*:*:*:*:*:*:*:*"
],
"product": "food-waste-management-system",
"vendor": "kishor-23",
"versions": [
{
"status": "affected",
"version": "411989e3ecb82895e53dca7865f72145f03d7d93"
},
{
"status": "affected",
"version": "b3a70b2c492dc9904de5be1ad9389bd79b87f82c"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "liaoxijun10086 (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Impacted is an unknown function of the file delivery/deliverymyord.php. The manipulation of the argument delivery_person_id/order_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 7.5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "SQL Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-74",
"description": "Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-05T05:00:16.888Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-413430 | kishor-23 food-waste-management-system deliverymyord.php sql injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/413430"
},
{
"name": "VDB-413430 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/413430/cti"
},
{
"name": "CVE-2026-105230 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-105230"
},
{
"name": "Submit #972895 | kishor-23 food-waste-management-system b3a70b2c492dc9904de5be1ad9389bd79b87f82c SQL Injection",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/972895"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/kishor-23/food-waste-management-system/issues/13"
},
{
"tags": [
"product"
],
"url": "https://github.com/kishor-23/food-waste-management-system/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-10-04T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-10-04T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-10-04T16:03:36.000Z",
"value": "VulDB entry last update"
}
],
"title": "kishor-23 food-waste-management-system deliverymyord.php sql injection",
"x_generator": [
"VulDB PVTS v202610"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-105230",
"datePublished": "2026-10-05T05:00:16.888Z",
"dateReserved": "2026-10-04T13:58:14.271Z",
"dateUpdated": "2026-10-05T05:00:16.888Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-105229 (GCVE-0-2026-105229)
Vulnerability from nvd – Published: 2026-10-05 04:45 – Updated: 2026-10-05 04:45
VLAI
EPSS
VEX
Title
kishor-23 food-waste-management-system User Registration Endpoint signup.php sql injection
Summary
A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This issue affects some unknown processing of the file signup.php of the component User Registration Endpoint. Executing a manipulation of the argument email/name/gender can lead to sql injection. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The project was informed of the problem early through an issue report but has not responded yet.
Severity
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/413429 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/413429/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-105229 | third-party-advisory |
| https://vuldb.com/submit/970269 | third-party-advisory |
| https://github.com/kishor-23/food-waste-managemen… | exploitissue-tracking |
| https://github.com/kishor-23/food-waste-managemen… | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| kishor-23 | food-waste-management-system |
Affected:
411989e3ecb82895e53dca7865f72145f03d7d93
Affected: b3a70b2c492dc9904de5be1ad9389bd79b87f82c cpe:2.3:a:kishor-23:food-waste-management-system:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:kishor-23:food-waste-management-system:*:*:*:*:*:*:*:*"
],
"modules": [
"User Registration Endpoint"
],
"product": "food-waste-management-system",
"vendor": "kishor-23",
"versions": [
{
"status": "affected",
"version": "411989e3ecb82895e53dca7865f72145f03d7d93"
},
{
"status": "affected",
"version": "b3a70b2c492dc9904de5be1ad9389bd79b87f82c"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "wy17634604398_gmail.com (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This issue affects some unknown processing of the file signup.php of the component User Registration Endpoint. Executing a manipulation of the argument email/name/gender can lead to sql injection. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 7.5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "SQL Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-74",
"description": "Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-05T04:45:13.938Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-413429 | kishor-23 food-waste-management-system User Registration Endpoint signup.php sql injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/413429"
},
{
"name": "VDB-413429 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/413429/cti"
},
{
"name": "CVE-2026-105229 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-105229"
},
{
"name": "Submit #970269 | kishor-23 food-waste-management-system b3a70b2c492dc9904de5be1ad9389bd79b87f82c SQL Injection",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/970269"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/kishor-23/food-waste-management-system/issues/5"
},
{
"tags": [
"product"
],
"url": "https://github.com/kishor-23/food-waste-management-system/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-10-04T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-10-04T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-10-04T16:03:31.000Z",
"value": "VulDB entry last update"
}
],
"title": "kishor-23 food-waste-management-system User Registration Endpoint signup.php sql injection",
"x_generator": [
"VulDB PVTS v202610"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-105229",
"datePublished": "2026-10-05T04:45:13.938Z",
"dateReserved": "2026-10-04T13:58:09.179Z",
"dateUpdated": "2026-10-05T04:45:13.938Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-105171 (GCVE-0-2026-105171)
Vulnerability from nvd – Published: 2026-10-04 23:45 – Updated: 2026-10-04 23:45
VLAI
EPSS
VEX
Title
kishor-23 food-waste-management-system Role Attribute admin.php authorization
Summary
A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected by this vulnerability is an unknown functionality of the file admin/admin.php of the component Role Attribute Handler. Such manipulation of the argument Name leads to authorization bypass. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. Multiple endpoints are affected. The project was informed of the problem early through an issue report but has not responded yet.
Severity
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/413403 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/413403/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-105171 | third-party-advisory |
| https://vuldb.com/submit/970277 | third-party-advisory |
| https://github.com/kishor-23/food-waste-managemen… | exploitissue-tracking |
| https://github.com/kishor-23/food-waste-managemen… | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| kishor-23 | food-waste-management-system |
Affected:
411989e3ecb82895e53dca7865f72145f03d7d93
Affected: b3a70b2c492dc9904de5be1ad9389bd79b87f82c cpe:2.3:a:kishor-23:food-waste-management-system:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:kishor-23:food-waste-management-system:*:*:*:*:*:*:*:*"
],
"modules": [
"Role Attribute Handler"
],
"product": "food-waste-management-system",
"vendor": "kishor-23",
"versions": [
{
"status": "affected",
"version": "411989e3ecb82895e53dca7865f72145f03d7d93"
},
{
"status": "affected",
"version": "b3a70b2c492dc9904de5be1ad9389bd79b87f82c"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "xbjds (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected by this vulnerability is an unknown functionality of the file admin/admin.php of the component Role Attribute Handler. Such manipulation of the argument Name leads to authorization bypass. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. Multiple endpoints are affected. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 6.5,
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-639",
"description": "Authorization Bypass",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-285",
"description": "Improper Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-04T23:45:15.077Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-413403 | kishor-23 food-waste-management-system Role Attribute admin.php authorization",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/413403"
},
{
"name": "VDB-413403 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/413403/cti"
},
{
"name": "CVE-2026-105171 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-105171"
},
{
"name": "Submit #970277 | kishor-23 food-waste-management-system b3a70b2c492dc9904de5be1ad9389bd79b87f82c Authorization Bypass",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/970277"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/kishor-23/food-waste-management-system/issues/11"
},
{
"tags": [
"product"
],
"url": "https://github.com/kishor-23/food-waste-management-system/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-10-04T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-10-04T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-10-04T10:20:14.000Z",
"value": "VulDB entry last update"
}
],
"title": "kishor-23 food-waste-management-system Role Attribute admin.php authorization",
"x_generator": [
"VulDB PVTS v202610"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-105171",
"datePublished": "2026-10-04T23:45:15.077Z",
"dateReserved": "2026-10-04T08:14:47.818Z",
"dateUpdated": "2026-10-04T23:45:15.077Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-105170 (GCVE-0-2026-105170)
Vulnerability from nvd – Published: 2026-10-04 23:30 – Updated: 2026-10-04 23:30
VLAI
EPSS
VEX
Title
kishor-23 food-waste-management-system Admin Signup signup.php missing authentication
Summary
A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected is an unknown function of the file admin/signup.php of the component Admin Signup. This manipulation of the argument sign causes missing authentication. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.
Severity
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/413402 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/413402/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-105170 | third-party-advisory |
| https://vuldb.com/submit/970276 | third-party-advisory |
| https://github.com/kishor-23/food-waste-managemen… | exploitissue-tracking |
| https://github.com/kishor-23/food-waste-managemen… | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| kishor-23 | food-waste-management-system |
Affected:
411989e3ecb82895e53dca7865f72145f03d7d93
Affected: b3a70b2c492dc9904de5be1ad9389bd79b87f82c cpe:2.3:a:kishor-23:food-waste-management-system:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:kishor-23:food-waste-management-system:*:*:*:*:*:*:*:*"
],
"modules": [
"Admin Signup"
],
"product": "food-waste-management-system",
"vendor": "kishor-23",
"versions": [
{
"status": "affected",
"version": "411989e3ecb82895e53dca7865f72145f03d7d93"
},
{
"status": "affected",
"version": "b3a70b2c492dc9904de5be1ad9389bd79b87f82c"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "xbjds (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected is an unknown function of the file admin/signup.php of the component Admin Signup. This manipulation of the argument sign causes missing authentication. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 7.5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-306",
"description": "Missing Authentication",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-287",
"description": "Improper Authentication",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-04T23:30:12.666Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-413402 | kishor-23 food-waste-management-system Admin Signup signup.php missing authentication",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/413402"
},
{
"name": "VDB-413402 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/413402/cti"
},
{
"name": "CVE-2026-105170 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-105170"
},
{
"name": "Submit #970276 | kishor-23 food-waste-management-system b3a70b2c492dc9904de5be1ad9389bd79b87f82c Missing Authentication",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/970276"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/kishor-23/food-waste-management-system/issues/10"
},
{
"tags": [
"product"
],
"url": "https://github.com/kishor-23/food-waste-management-system/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-10-04T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-10-04T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-10-04T10:20:10.000Z",
"value": "VulDB entry last update"
}
],
"title": "kishor-23 food-waste-management-system Admin Signup signup.php missing authentication",
"x_generator": [
"VulDB PVTS v202610"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-105170",
"datePublished": "2026-10-04T23:30:12.666Z",
"dateReserved": "2026-10-04T08:14:44.059Z",
"dateUpdated": "2026-10-04T23:30:12.666Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-105169 (GCVE-0-2026-105169)
Vulnerability from nvd – Published: 2026-10-04 23:15 – Updated: 2026-10-04 23:15
VLAI
EPSS
VEX
Title
kishor-23 food-waste-management-system Take Order delivery.php sql injection
Summary
A security flaw has been discovered in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This impacts an unknown function of the file delivery/delivery.php of the component Take Order Handler. The manipulation of the argument order_id/delivery_person_id results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The project was informed of the problem early through an issue report but has not responded yet.
Severity
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/413401 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/413401/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-105169 | third-party-advisory |
| https://vuldb.com/submit/970275 | third-party-advisory |
| https://github.com/kishor-23/food-waste-managemen… | exploitissue-tracking |
| https://github.com/kishor-23/food-waste-managemen… | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| kishor-23 | food-waste-management-system |
Affected:
411989e3ecb82895e53dca7865f72145f03d7d93
Affected: b3a70b2c492dc9904de5be1ad9389bd79b87f82c cpe:2.3:a:kishor-23:food-waste-management-system:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:kishor-23:food-waste-management-system:*:*:*:*:*:*:*:*"
],
"modules": [
"Take Order Handler"
],
"product": "food-waste-management-system",
"vendor": "kishor-23",
"versions": [
{
"status": "affected",
"version": "411989e3ecb82895e53dca7865f72145f03d7d93"
},
{
"status": "affected",
"version": "b3a70b2c492dc9904de5be1ad9389bd79b87f82c"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "xbjds (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A security flaw has been discovered in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This impacts an unknown function of the file delivery/delivery.php of the component Take Order Handler. The manipulation of the argument order_id/delivery_person_id results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 7.5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "SQL Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-74",
"description": "Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-04T23:15:11.555Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-413401 | kishor-23 food-waste-management-system Take Order delivery.php sql injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/413401"
},
{
"name": "VDB-413401 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/413401/cti"
},
{
"name": "CVE-2026-105169 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-105169"
},
{
"name": "Submit #970275 | kishor-23 food-waste-management-system b3a70b2c492dc9904de5be1ad9389bd79b87f82c SQL Injection",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/970275"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/kishor-23/food-waste-management-system/issues/9"
},
{
"tags": [
"product"
],
"url": "https://github.com/kishor-23/food-waste-management-system/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-10-04T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-10-04T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-10-04T10:20:06.000Z",
"value": "VulDB entry last update"
}
],
"title": "kishor-23 food-waste-management-system Take Order delivery.php sql injection",
"x_generator": [
"VulDB PVTS v202610"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-105169",
"datePublished": "2026-10-04T23:15:11.555Z",
"dateReserved": "2026-10-04T08:14:40.655Z",
"dateUpdated": "2026-10-04T23:15:11.555Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-105168 (GCVE-0-2026-105168)
Vulnerability from nvd – Published: 2026-10-04 23:00 – Updated: 2026-10-04 23:00
VLAI
EPSS
VEX
Title
kishor-23 food-waste-management-system Order Assignment Block admin.php sql injection
Summary
A vulnerability was identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This affects an unknown function of the file admin/admin.php of the component Order Assignment Block. The manipulation of the argument order_id/delivery_person_id leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.
Severity
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/413400 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/413400/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-105168 | third-party-advisory |
| https://vuldb.com/submit/970272 | third-party-advisory |
| https://github.com/kishor-23/food-waste-managemen… | exploitissue-tracking |
| https://github.com/kishor-23/food-waste-managemen… | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| kishor-23 | food-waste-management-system |
Affected:
411989e3ecb82895e53dca7865f72145f03d7d93
Affected: b3a70b2c492dc9904de5be1ad9389bd79b87f82c cpe:2.3:a:kishor-23:food-waste-management-system:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:kishor-23:food-waste-management-system:*:*:*:*:*:*:*:*"
],
"modules": [
"Order Assignment Block"
],
"product": "food-waste-management-system",
"vendor": "kishor-23",
"versions": [
{
"status": "affected",
"version": "411989e3ecb82895e53dca7865f72145f03d7d93"
},
{
"status": "affected",
"version": "b3a70b2c492dc9904de5be1ad9389bd79b87f82c"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "xbjds (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This affects an unknown function of the file admin/admin.php of the component Order Assignment Block. The manipulation of the argument order_id/delivery_person_id leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 6.5,
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "SQL Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-74",
"description": "Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-04T23:00:15.403Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-413400 | kishor-23 food-waste-management-system Order Assignment Block admin.php sql injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/413400"
},
{
"name": "VDB-413400 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/413400/cti"
},
{
"name": "CVE-2026-105168 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-105168"
},
{
"name": "Submit #970272 | kishor-23 food-waste-management-system b3a70b2c492dc9904de5be1ad9389bd79b87f82c SQL Injection",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/970272"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/kishor-23/food-waste-management-system/issues/8"
},
{
"tags": [
"product"
],
"url": "https://github.com/kishor-23/food-waste-management-system/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-10-04T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-10-04T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-10-04T10:20:02.000Z",
"value": "VulDB entry last update"
}
],
"title": "kishor-23 food-waste-management-system Order Assignment Block admin.php sql injection",
"x_generator": [
"VulDB PVTS v202610"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-105168",
"datePublished": "2026-10-04T23:00:15.403Z",
"dateReserved": "2026-10-04T08:14:37.127Z",
"dateUpdated": "2026-10-04T23:00:15.403Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-105167 (GCVE-0-2026-105167)
Vulnerability from nvd – Published: 2026-10-04 22:45 – Updated: 2026-10-04 22:45
VLAI
EPSS
VEX
Title
kishor-23 food-waste-management-system donate.php sql injection
Summary
A vulnerability was determined in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The impacted element is an unknown function of the file admin/donate.php. Executing a manipulation of the argument location can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The project was informed of the problem early through an issue report but has not responded yet.
Severity
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/413399 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/413399/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-105167 | third-party-advisory |
| https://vuldb.com/submit/970271 | third-party-advisory |
| https://github.com/kishor-23/food-waste-managemen… | exploitissue-tracking |
| https://github.com/kishor-23/food-waste-managemen… | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| kishor-23 | food-waste-management-system |
Affected:
411989e3ecb82895e53dca7865f72145f03d7d93
Affected: b3a70b2c492dc9904de5be1ad9389bd79b87f82c cpe:2.3:a:kishor-23:food-waste-management-system:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:kishor-23:food-waste-management-system:*:*:*:*:*:*:*:*"
],
"product": "food-waste-management-system",
"vendor": "kishor-23",
"versions": [
{
"status": "affected",
"version": "411989e3ecb82895e53dca7865f72145f03d7d93"
},
{
"status": "affected",
"version": "b3a70b2c492dc9904de5be1ad9389bd79b87f82c"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "xbjds (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was determined in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The impacted element is an unknown function of the file admin/donate.php. Executing a manipulation of the argument location can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 7.5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "SQL Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-74",
"description": "Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-04T22:45:15.287Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-413399 | kishor-23 food-waste-management-system donate.php sql injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/413399"
},
{
"name": "VDB-413399 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/413399/cti"
},
{
"name": "CVE-2026-105167 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-105167"
},
{
"name": "Submit #970271 | kishor-23 food-waste-management-system b3a70b2c492dc9904de5be1ad9389bd79b87f82c SQL Injection",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/970271"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/kishor-23/food-waste-management-system/issues/7"
},
{
"tags": [
"product"
],
"url": "https://github.com/kishor-23/food-waste-management-system/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-10-04T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-10-04T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-10-04T10:19:58.000Z",
"value": "VulDB entry last update"
}
],
"title": "kishor-23 food-waste-management-system donate.php sql injection",
"x_generator": [
"VulDB PVTS v202610"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-105167",
"datePublished": "2026-10-04T22:45:15.287Z",
"dateReserved": "2026-10-04T08:14:33.743Z",
"dateUpdated": "2026-10-04T22:45:15.287Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-105166 (GCVE-0-2026-105166)
Vulnerability from nvd – Published: 2026-10-04 22:30 – Updated: 2026-10-04 22:30
VLAI
EPSS
VEX
Title
kishor-23 food-waste-management-system Food Donation Form fooddonateform.php insert sql injection
Summary
A vulnerability was found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The affected element is the function insert of the file fooddonateform.php of the component Food Donation Form. Performing a manipulation of the argument image-choice results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The project was informed of the problem early through an issue report but has not responded yet.
Severity
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/413398 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/413398/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-105166 | third-party-advisory |
| https://vuldb.com/submit/970270 | third-party-advisory |
| https://github.com/kishor-23/food-waste-managemen… | exploitissue-tracking |
| https://github.com/kishor-23/food-waste-managemen… | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| kishor-23 | food-waste-management-system |
Affected:
411989e3ecb82895e53dca7865f72145f03d7d93
Affected: b3a70b2c492dc9904de5be1ad9389bd79b87f82c cpe:2.3:a:kishor-23:food-waste-management-system:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:kishor-23:food-waste-management-system:*:*:*:*:*:*:*:*"
],
"modules": [
"Food Donation Form"
],
"product": "food-waste-management-system",
"vendor": "kishor-23",
"versions": [
{
"status": "affected",
"version": "411989e3ecb82895e53dca7865f72145f03d7d93"
},
{
"status": "affected",
"version": "b3a70b2c492dc9904de5be1ad9389bd79b87f82c"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "yukong (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The affected element is the function insert of the file fooddonateform.php of the component Food Donation Form. Performing a manipulation of the argument image-choice results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 7.5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "SQL Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-74",
"description": "Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-04T22:30:11.171Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-413398 | kishor-23 food-waste-management-system Food Donation Form fooddonateform.php insert sql injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/413398"
},
{
"name": "VDB-413398 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/413398/cti"
},
{
"name": "CVE-2026-105166 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-105166"
},
{
"name": "Submit #970270 | kishor-23 food-waste-management-system b3a70b2c492dc9904de5be1ad9389bd79b87f82c SQL Injection",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/970270"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/kishor-23/food-waste-management-system/issues/6"
},
{
"tags": [
"product"
],
"url": "https://github.com/kishor-23/food-waste-management-system/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-10-04T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-10-04T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-10-04T10:19:54.000Z",
"value": "VulDB entry last update"
}
],
"title": "kishor-23 food-waste-management-system Food Donation Form fooddonateform.php insert sql injection",
"x_generator": [
"VulDB PVTS v202610"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-105166",
"datePublished": "2026-10-04T22:30:11.171Z",
"dateReserved": "2026-10-04T08:14:30.191Z",
"dateUpdated": "2026-10-04T22:30:11.171Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2024-2557 (GCVE-0-2024-2557)
Vulnerability from nvd – Published: 2024-03-17 08:31 – Updated: 2024-08-27 14:14
VLAI
EPSS
VEX
Title
kishor-23 Food Waste Management System admin.php improper authorization
Summary
A vulnerability was found in kishor-23 Food Waste Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/admin.php. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-257056. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Severity
5.3 (Medium)
5.3 (Medium)
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-08-27 14:10 UTC
CWE
- CWE-285 - Improper Authorization
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://vuldb.com/?id.257056 | vdb-entry |
| https://vuldb.com/?ctiid.257056 | signaturepermissions-required |
| https://github.com/vanitashtml/CVE-Dumps/blob/mai… | exploit |
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| kishor-23 | Food Waste Management System |
Affected:
1.0
|
|
| kishor23 | food_waste_management_system |
Affected:
1.0
cpe:2.3:a:kishor23:food_waste_management_system:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-01T19:18:48.249Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "VDB-257056 | kishor-23 Food Waste Management System admin.php improper authorization",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "https://vuldb.com/?id.257056"
},
{
"name": "VDB-257056 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required",
"x_transferred"
],
"url": "https://vuldb.com/?ctiid.257056"
},
{
"tags": [
"exploit",
"x_transferred"
],
"url": "https://github.com/vanitashtml/CVE-Dumps/blob/main/Execute%20After%20Redirect%20-%20Food%20Management%20System.md"
}
],
"title": "CVE Program Container"
},
{
"affected": [
{
"cpes": [
"cpe:2.3:a:kishor23:food_waste_management_system:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "food_waste_management_system",
"vendor": "kishor23",
"versions": [
{
"status": "affected",
"version": "1.0"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-2557",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-08-27T14:10:44.311607Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-08-27T14:14:55.226Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Food Waste Management System",
"vendor": "kishor-23",
"versions": [
{
"status": "affected",
"version": "1.0"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "rjavenido22 (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was found in kishor-23 Food Waste Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/admin.php. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-257056. NOTE: The vendor was contacted early about this disclosure but did not respond in any way."
},
{
"lang": "de",
"value": "In kishor-23 Food Waste Management System 1.0 wurde eine Schwachstelle ausgemacht. Sie wurde als kritisch eingestuft. Das betrifft eine unbekannte Funktionalit\u00e4t der Datei /admin/admin.php. Durch Manipulieren mit unbekannten Daten kann eine improper authorization-Schwachstelle ausgenutzt werden. Der Angriff kann \u00fcber das Netzwerk angegangen werden. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-285",
"description": "CWE-285 Improper Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-03-17T08:31:04.409Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-257056 | kishor-23 Food Waste Management System admin.php improper authorization",
"tags": [
"vdb-entry"
],
"url": "https://vuldb.com/?id.257056"
},
{
"name": "VDB-257056 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/?ctiid.257056"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/vanitashtml/CVE-Dumps/blob/main/Execute%20After%20Redirect%20-%20Food%20Management%20System.md"
}
],
"timeline": [
{
"lang": "en",
"time": "2024-03-16T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2024-03-16T01:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2024-03-16T07:54:23.000Z",
"value": "VulDB entry last update"
}
],
"title": "kishor-23 Food Waste Management System admin.php improper authorization"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2024-2557",
"datePublished": "2024-03-17T08:31:04.409Z",
"dateReserved": "2024-03-16T06:49:12.935Z",
"dateUpdated": "2024-08-27T14:14:55.226Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2026-105233 (GCVE-0-2026-105233)
Vulnerability from cvelistv5 – Published: 2026-10-05 05:45 – Updated: 2026-10-05 05:45
VLAI
EPSS
VEX
Title
kishor-23 food-waste-management-system Login Flow login.php session fixiation
Summary
A vulnerability has been found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This affects an unknown function of the file login.php of the component Login Flow. Such manipulation of the argument PHPSESSID leads to session fixiation. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The project was informed of the problem early through an issue report but has not responded yet.
Severity
CWE
- CWE-384 - Session Fixiation
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/413433 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/413433/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-105233 | third-party-advisory |
| https://vuldb.com/submit/972904 | third-party-advisory |
| https://github.com/kishor-23/food-waste-managemen… | exploitissue-tracking |
| https://github.com/kishor-23/food-waste-managemen… | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| kishor-23 | food-waste-management-system |
Affected:
411989e3ecb82895e53dca7865f72145f03d7d93
Affected: b3a70b2c492dc9904de5be1ad9389bd79b87f82c cpe:2.3:a:kishor-23:food-waste-management-system:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:kishor-23:food-waste-management-system:*:*:*:*:*:*:*:*"
],
"modules": [
"Login Flow"
],
"product": "food-waste-management-system",
"vendor": "kishor-23",
"versions": [
{
"status": "affected",
"version": "411989e3ecb82895e53dca7865f72145f03d7d93"
},
{
"status": "affected",
"version": "b3a70b2c492dc9904de5be1ad9389bd79b87f82c"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "liaoxijun10086 (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This affects an unknown function of the file login.php of the component Login Flow. Such manipulation of the argument PHPSESSID leads to session fixiation. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 7.5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-384",
"description": "Session Fixiation",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-05T05:45:09.492Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-413433 | kishor-23 food-waste-management-system Login Flow login.php session fixiation",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/413433"
},
{
"name": "VDB-413433 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/413433/cti"
},
{
"name": "CVE-2026-105233 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-105233"
},
{
"name": "Submit #972904 | kishor-23 food-waste-management-system food-waste-management-system Session Fixiation",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/972904"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/kishor-23/food-waste-management-system/issues/16"
},
{
"tags": [
"product"
],
"url": "https://github.com/kishor-23/food-waste-management-system/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-10-04T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-10-04T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-10-04T16:09:13.000Z",
"value": "VulDB entry last update"
}
],
"title": "kishor-23 food-waste-management-system Login Flow login.php session fixiation",
"x_generator": [
"VulDB PVTS v202610"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-105233",
"datePublished": "2026-10-05T05:45:09.492Z",
"dateReserved": "2026-10-04T13:58:25.026Z",
"dateUpdated": "2026-10-05T05:45:09.492Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-105232 (GCVE-0-2026-105232)
Vulnerability from cvelistv5 – Published: 2026-10-05 05:30 – Updated: 2026-10-05 05:30
VLAI
EPSS
VEX
Title
kishor-23 food-waste-management-system Registration deliverysignup.php sql injection
Summary
A flaw has been found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The impacted element is an unknown function of the file delivery/deliverysignup.php of the component Registration Page. This manipulation of the argument username/email/location causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.
Severity
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/413432 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/413432/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-105232 | third-party-advisory |
| https://vuldb.com/submit/972903 | third-party-advisory |
| https://github.com/kishor-23/food-waste-managemen… | exploitissue-tracking |
| https://github.com/kishor-23/food-waste-managemen… | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| kishor-23 | food-waste-management-system |
Affected:
411989e3ecb82895e53dca7865f72145f03d7d93
Affected: b3a70b2c492dc9904de5be1ad9389bd79b87f82c cpe:2.3:a:kishor-23:food-waste-management-system:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:kishor-23:food-waste-management-system:*:*:*:*:*:*:*:*"
],
"modules": [
"Registration Page"
],
"product": "food-waste-management-system",
"vendor": "kishor-23",
"versions": [
{
"status": "affected",
"version": "411989e3ecb82895e53dca7865f72145f03d7d93"
},
{
"status": "affected",
"version": "b3a70b2c492dc9904de5be1ad9389bd79b87f82c"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "liaoxijun10086 (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A flaw has been found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The impacted element is an unknown function of the file delivery/deliverysignup.php of the component Registration Page. This manipulation of the argument username/email/location causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 7.5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "SQL Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-74",
"description": "Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-05T05:30:13.427Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-413432 | kishor-23 food-waste-management-system Registration deliverysignup.php sql injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/413432"
},
{
"name": "VDB-413432 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/413432/cti"
},
{
"name": "CVE-2026-105232 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-105232"
},
{
"name": "Submit #972903 | kishor-23 food-waste-management-system b3a70b2c492dc9904de5be1ad9389bd79b87f82c SQL Injection",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/972903"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/kishor-23/food-waste-management-system/issues/14"
},
{
"tags": [
"product"
],
"url": "https://github.com/kishor-23/food-waste-management-system/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-10-04T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-10-04T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-10-04T16:03:44.000Z",
"value": "VulDB entry last update"
}
],
"title": "kishor-23 food-waste-management-system Registration deliverysignup.php sql injection",
"x_generator": [
"VulDB PVTS v202610"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-105232",
"datePublished": "2026-10-05T05:30:13.427Z",
"dateReserved": "2026-10-04T13:58:21.548Z",
"dateUpdated": "2026-10-05T05:30:13.427Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-105231 (GCVE-0-2026-105231)
Vulnerability from cvelistv5 – Published: 2026-10-05 05:15 – Updated: 2026-10-05 05:15
VLAI
EPSS
VEX
Title
kishor-23 food-waste-management-system Admin Registration signup.php sql injection
Summary
A vulnerability was detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The affected element is an unknown function of the file admin/signup.php of the component Admin Registration. The manipulation of the argument email/username/location results in sql injection. It is possible to launch the attack remotely. The exploit is now public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The project was informed of the problem early through an issue report but has not responded yet.
Severity
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/413431 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/413431/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-105231 | third-party-advisory |
| https://vuldb.com/submit/972898 | third-party-advisory |
| https://github.com/kishor-23/food-waste-managemen… | exploitissue-tracking |
| https://github.com/kishor-23/food-waste-managemen… | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| kishor-23 | food-waste-management-system |
Affected:
411989e3ecb82895e53dca7865f72145f03d7d93
Affected: b3a70b2c492dc9904de5be1ad9389bd79b87f82c cpe:2.3:a:kishor-23:food-waste-management-system:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:kishor-23:food-waste-management-system:*:*:*:*:*:*:*:*"
],
"modules": [
"Admin Registration"
],
"product": "food-waste-management-system",
"vendor": "kishor-23",
"versions": [
{
"status": "affected",
"version": "411989e3ecb82895e53dca7865f72145f03d7d93"
},
{
"status": "affected",
"version": "b3a70b2c492dc9904de5be1ad9389bd79b87f82c"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "liaoxijun10086 (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The affected element is an unknown function of the file admin/signup.php of the component Admin Registration. The manipulation of the argument email/username/location results in sql injection. It is possible to launch the attack remotely. The exploit is now public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 7.5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "SQL Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-74",
"description": "Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-05T05:15:17.185Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-413431 | kishor-23 food-waste-management-system Admin Registration signup.php sql injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/413431"
},
{
"name": "VDB-413431 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/413431/cti"
},
{
"name": "CVE-2026-105231 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-105231"
},
{
"name": "Submit #972898 | kishor-23 food-waste-management-system b3a70b2c492dc9904de5be1ad9389bd79b87f82c SQL Injection",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/972898"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/kishor-23/food-waste-management-system/issues/15"
},
{
"tags": [
"product"
],
"url": "https://github.com/kishor-23/food-waste-management-system/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-10-04T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-10-04T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-10-04T16:09:08.000Z",
"value": "VulDB entry last update"
}
],
"title": "kishor-23 food-waste-management-system Admin Registration signup.php sql injection",
"x_generator": [
"VulDB PVTS v202610"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-105231",
"datePublished": "2026-10-05T05:15:17.185Z",
"dateReserved": "2026-10-04T13:58:17.967Z",
"dateUpdated": "2026-10-05T05:15:17.185Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-105230 (GCVE-0-2026-105230)
Vulnerability from cvelistv5 – Published: 2026-10-05 05:00 – Updated: 2026-10-05 05:00
VLAI
EPSS
VEX
Title
kishor-23 food-waste-management-system deliverymyord.php sql injection
Summary
A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Impacted is an unknown function of the file delivery/deliverymyord.php. The manipulation of the argument delivery_person_id/order_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.
Severity
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/413430 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/413430/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-105230 | third-party-advisory |
| https://vuldb.com/submit/972895 | third-party-advisory |
| https://github.com/kishor-23/food-waste-managemen… | exploitissue-tracking |
| https://github.com/kishor-23/food-waste-managemen… | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| kishor-23 | food-waste-management-system |
Affected:
411989e3ecb82895e53dca7865f72145f03d7d93
Affected: b3a70b2c492dc9904de5be1ad9389bd79b87f82c cpe:2.3:a:kishor-23:food-waste-management-system:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:kishor-23:food-waste-management-system:*:*:*:*:*:*:*:*"
],
"product": "food-waste-management-system",
"vendor": "kishor-23",
"versions": [
{
"status": "affected",
"version": "411989e3ecb82895e53dca7865f72145f03d7d93"
},
{
"status": "affected",
"version": "b3a70b2c492dc9904de5be1ad9389bd79b87f82c"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "liaoxijun10086 (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Impacted is an unknown function of the file delivery/deliverymyord.php. The manipulation of the argument delivery_person_id/order_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 7.5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "SQL Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-74",
"description": "Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-05T05:00:16.888Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-413430 | kishor-23 food-waste-management-system deliverymyord.php sql injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/413430"
},
{
"name": "VDB-413430 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/413430/cti"
},
{
"name": "CVE-2026-105230 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-105230"
},
{
"name": "Submit #972895 | kishor-23 food-waste-management-system b3a70b2c492dc9904de5be1ad9389bd79b87f82c SQL Injection",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/972895"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/kishor-23/food-waste-management-system/issues/13"
},
{
"tags": [
"product"
],
"url": "https://github.com/kishor-23/food-waste-management-system/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-10-04T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-10-04T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-10-04T16:03:36.000Z",
"value": "VulDB entry last update"
}
],
"title": "kishor-23 food-waste-management-system deliverymyord.php sql injection",
"x_generator": [
"VulDB PVTS v202610"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-105230",
"datePublished": "2026-10-05T05:00:16.888Z",
"dateReserved": "2026-10-04T13:58:14.271Z",
"dateUpdated": "2026-10-05T05:00:16.888Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-105229 (GCVE-0-2026-105229)
Vulnerability from cvelistv5 – Published: 2026-10-05 04:45 – Updated: 2026-10-05 04:45
VLAI
EPSS
VEX
Title
kishor-23 food-waste-management-system User Registration Endpoint signup.php sql injection
Summary
A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This issue affects some unknown processing of the file signup.php of the component User Registration Endpoint. Executing a manipulation of the argument email/name/gender can lead to sql injection. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The project was informed of the problem early through an issue report but has not responded yet.
Severity
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/413429 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/413429/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-105229 | third-party-advisory |
| https://vuldb.com/submit/970269 | third-party-advisory |
| https://github.com/kishor-23/food-waste-managemen… | exploitissue-tracking |
| https://github.com/kishor-23/food-waste-managemen… | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| kishor-23 | food-waste-management-system |
Affected:
411989e3ecb82895e53dca7865f72145f03d7d93
Affected: b3a70b2c492dc9904de5be1ad9389bd79b87f82c cpe:2.3:a:kishor-23:food-waste-management-system:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:kishor-23:food-waste-management-system:*:*:*:*:*:*:*:*"
],
"modules": [
"User Registration Endpoint"
],
"product": "food-waste-management-system",
"vendor": "kishor-23",
"versions": [
{
"status": "affected",
"version": "411989e3ecb82895e53dca7865f72145f03d7d93"
},
{
"status": "affected",
"version": "b3a70b2c492dc9904de5be1ad9389bd79b87f82c"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "wy17634604398_gmail.com (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This issue affects some unknown processing of the file signup.php of the component User Registration Endpoint. Executing a manipulation of the argument email/name/gender can lead to sql injection. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 7.5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "SQL Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-74",
"description": "Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-05T04:45:13.938Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-413429 | kishor-23 food-waste-management-system User Registration Endpoint signup.php sql injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/413429"
},
{
"name": "VDB-413429 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/413429/cti"
},
{
"name": "CVE-2026-105229 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-105229"
},
{
"name": "Submit #970269 | kishor-23 food-waste-management-system b3a70b2c492dc9904de5be1ad9389bd79b87f82c SQL Injection",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/970269"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/kishor-23/food-waste-management-system/issues/5"
},
{
"tags": [
"product"
],
"url": "https://github.com/kishor-23/food-waste-management-system/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-10-04T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-10-04T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-10-04T16:03:31.000Z",
"value": "VulDB entry last update"
}
],
"title": "kishor-23 food-waste-management-system User Registration Endpoint signup.php sql injection",
"x_generator": [
"VulDB PVTS v202610"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-105229",
"datePublished": "2026-10-05T04:45:13.938Z",
"dateReserved": "2026-10-04T13:58:09.179Z",
"dateUpdated": "2026-10-05T04:45:13.938Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-105171 (GCVE-0-2026-105171)
Vulnerability from cvelistv5 – Published: 2026-10-04 23:45 – Updated: 2026-10-04 23:45
VLAI
EPSS
VEX
Title
kishor-23 food-waste-management-system Role Attribute admin.php authorization
Summary
A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected by this vulnerability is an unknown functionality of the file admin/admin.php of the component Role Attribute Handler. Such manipulation of the argument Name leads to authorization bypass. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. Multiple endpoints are affected. The project was informed of the problem early through an issue report but has not responded yet.
Severity
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/413403 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/413403/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-105171 | third-party-advisory |
| https://vuldb.com/submit/970277 | third-party-advisory |
| https://github.com/kishor-23/food-waste-managemen… | exploitissue-tracking |
| https://github.com/kishor-23/food-waste-managemen… | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| kishor-23 | food-waste-management-system |
Affected:
411989e3ecb82895e53dca7865f72145f03d7d93
Affected: b3a70b2c492dc9904de5be1ad9389bd79b87f82c cpe:2.3:a:kishor-23:food-waste-management-system:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:kishor-23:food-waste-management-system:*:*:*:*:*:*:*:*"
],
"modules": [
"Role Attribute Handler"
],
"product": "food-waste-management-system",
"vendor": "kishor-23",
"versions": [
{
"status": "affected",
"version": "411989e3ecb82895e53dca7865f72145f03d7d93"
},
{
"status": "affected",
"version": "b3a70b2c492dc9904de5be1ad9389bd79b87f82c"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "xbjds (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected by this vulnerability is an unknown functionality of the file admin/admin.php of the component Role Attribute Handler. Such manipulation of the argument Name leads to authorization bypass. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. Multiple endpoints are affected. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 6.5,
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-639",
"description": "Authorization Bypass",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-285",
"description": "Improper Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-04T23:45:15.077Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-413403 | kishor-23 food-waste-management-system Role Attribute admin.php authorization",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/413403"
},
{
"name": "VDB-413403 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/413403/cti"
},
{
"name": "CVE-2026-105171 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-105171"
},
{
"name": "Submit #970277 | kishor-23 food-waste-management-system b3a70b2c492dc9904de5be1ad9389bd79b87f82c Authorization Bypass",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/970277"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/kishor-23/food-waste-management-system/issues/11"
},
{
"tags": [
"product"
],
"url": "https://github.com/kishor-23/food-waste-management-system/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-10-04T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-10-04T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-10-04T10:20:14.000Z",
"value": "VulDB entry last update"
}
],
"title": "kishor-23 food-waste-management-system Role Attribute admin.php authorization",
"x_generator": [
"VulDB PVTS v202610"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-105171",
"datePublished": "2026-10-04T23:45:15.077Z",
"dateReserved": "2026-10-04T08:14:47.818Z",
"dateUpdated": "2026-10-04T23:45:15.077Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-105170 (GCVE-0-2026-105170)
Vulnerability from cvelistv5 – Published: 2026-10-04 23:30 – Updated: 2026-10-04 23:30
VLAI
EPSS
VEX
Title
kishor-23 food-waste-management-system Admin Signup signup.php missing authentication
Summary
A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected is an unknown function of the file admin/signup.php of the component Admin Signup. This manipulation of the argument sign causes missing authentication. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.
Severity
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/413402 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/413402/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-105170 | third-party-advisory |
| https://vuldb.com/submit/970276 | third-party-advisory |
| https://github.com/kishor-23/food-waste-managemen… | exploitissue-tracking |
| https://github.com/kishor-23/food-waste-managemen… | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| kishor-23 | food-waste-management-system |
Affected:
411989e3ecb82895e53dca7865f72145f03d7d93
Affected: b3a70b2c492dc9904de5be1ad9389bd79b87f82c cpe:2.3:a:kishor-23:food-waste-management-system:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:kishor-23:food-waste-management-system:*:*:*:*:*:*:*:*"
],
"modules": [
"Admin Signup"
],
"product": "food-waste-management-system",
"vendor": "kishor-23",
"versions": [
{
"status": "affected",
"version": "411989e3ecb82895e53dca7865f72145f03d7d93"
},
{
"status": "affected",
"version": "b3a70b2c492dc9904de5be1ad9389bd79b87f82c"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "xbjds (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected is an unknown function of the file admin/signup.php of the component Admin Signup. This manipulation of the argument sign causes missing authentication. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 7.5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-306",
"description": "Missing Authentication",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-287",
"description": "Improper Authentication",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-04T23:30:12.666Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-413402 | kishor-23 food-waste-management-system Admin Signup signup.php missing authentication",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/413402"
},
{
"name": "VDB-413402 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/413402/cti"
},
{
"name": "CVE-2026-105170 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-105170"
},
{
"name": "Submit #970276 | kishor-23 food-waste-management-system b3a70b2c492dc9904de5be1ad9389bd79b87f82c Missing Authentication",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/970276"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/kishor-23/food-waste-management-system/issues/10"
},
{
"tags": [
"product"
],
"url": "https://github.com/kishor-23/food-waste-management-system/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-10-04T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-10-04T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-10-04T10:20:10.000Z",
"value": "VulDB entry last update"
}
],
"title": "kishor-23 food-waste-management-system Admin Signup signup.php missing authentication",
"x_generator": [
"VulDB PVTS v202610"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-105170",
"datePublished": "2026-10-04T23:30:12.666Z",
"dateReserved": "2026-10-04T08:14:44.059Z",
"dateUpdated": "2026-10-04T23:30:12.666Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-105169 (GCVE-0-2026-105169)
Vulnerability from cvelistv5 – Published: 2026-10-04 23:15 – Updated: 2026-10-04 23:15
VLAI
EPSS
VEX
Title
kishor-23 food-waste-management-system Take Order delivery.php sql injection
Summary
A security flaw has been discovered in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This impacts an unknown function of the file delivery/delivery.php of the component Take Order Handler. The manipulation of the argument order_id/delivery_person_id results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The project was informed of the problem early through an issue report but has not responded yet.
Severity
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/413401 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/413401/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-105169 | third-party-advisory |
| https://vuldb.com/submit/970275 | third-party-advisory |
| https://github.com/kishor-23/food-waste-managemen… | exploitissue-tracking |
| https://github.com/kishor-23/food-waste-managemen… | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| kishor-23 | food-waste-management-system |
Affected:
411989e3ecb82895e53dca7865f72145f03d7d93
Affected: b3a70b2c492dc9904de5be1ad9389bd79b87f82c cpe:2.3:a:kishor-23:food-waste-management-system:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:kishor-23:food-waste-management-system:*:*:*:*:*:*:*:*"
],
"modules": [
"Take Order Handler"
],
"product": "food-waste-management-system",
"vendor": "kishor-23",
"versions": [
{
"status": "affected",
"version": "411989e3ecb82895e53dca7865f72145f03d7d93"
},
{
"status": "affected",
"version": "b3a70b2c492dc9904de5be1ad9389bd79b87f82c"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "xbjds (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A security flaw has been discovered in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This impacts an unknown function of the file delivery/delivery.php of the component Take Order Handler. The manipulation of the argument order_id/delivery_person_id results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 7.5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "SQL Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-74",
"description": "Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-04T23:15:11.555Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-413401 | kishor-23 food-waste-management-system Take Order delivery.php sql injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/413401"
},
{
"name": "VDB-413401 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/413401/cti"
},
{
"name": "CVE-2026-105169 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-105169"
},
{
"name": "Submit #970275 | kishor-23 food-waste-management-system b3a70b2c492dc9904de5be1ad9389bd79b87f82c SQL Injection",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/970275"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/kishor-23/food-waste-management-system/issues/9"
},
{
"tags": [
"product"
],
"url": "https://github.com/kishor-23/food-waste-management-system/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-10-04T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-10-04T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-10-04T10:20:06.000Z",
"value": "VulDB entry last update"
}
],
"title": "kishor-23 food-waste-management-system Take Order delivery.php sql injection",
"x_generator": [
"VulDB PVTS v202610"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-105169",
"datePublished": "2026-10-04T23:15:11.555Z",
"dateReserved": "2026-10-04T08:14:40.655Z",
"dateUpdated": "2026-10-04T23:15:11.555Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-105168 (GCVE-0-2026-105168)
Vulnerability from cvelistv5 – Published: 2026-10-04 23:00 – Updated: 2026-10-04 23:00
VLAI
EPSS
VEX
Title
kishor-23 food-waste-management-system Order Assignment Block admin.php sql injection
Summary
A vulnerability was identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This affects an unknown function of the file admin/admin.php of the component Order Assignment Block. The manipulation of the argument order_id/delivery_person_id leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.
Severity
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/413400 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/413400/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-105168 | third-party-advisory |
| https://vuldb.com/submit/970272 | third-party-advisory |
| https://github.com/kishor-23/food-waste-managemen… | exploitissue-tracking |
| https://github.com/kishor-23/food-waste-managemen… | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| kishor-23 | food-waste-management-system |
Affected:
411989e3ecb82895e53dca7865f72145f03d7d93
Affected: b3a70b2c492dc9904de5be1ad9389bd79b87f82c cpe:2.3:a:kishor-23:food-waste-management-system:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:kishor-23:food-waste-management-system:*:*:*:*:*:*:*:*"
],
"modules": [
"Order Assignment Block"
],
"product": "food-waste-management-system",
"vendor": "kishor-23",
"versions": [
{
"status": "affected",
"version": "411989e3ecb82895e53dca7865f72145f03d7d93"
},
{
"status": "affected",
"version": "b3a70b2c492dc9904de5be1ad9389bd79b87f82c"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "xbjds (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This affects an unknown function of the file admin/admin.php of the component Order Assignment Block. The manipulation of the argument order_id/delivery_person_id leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 6.5,
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "SQL Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-74",
"description": "Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-04T23:00:15.403Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-413400 | kishor-23 food-waste-management-system Order Assignment Block admin.php sql injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/413400"
},
{
"name": "VDB-413400 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/413400/cti"
},
{
"name": "CVE-2026-105168 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-105168"
},
{
"name": "Submit #970272 | kishor-23 food-waste-management-system b3a70b2c492dc9904de5be1ad9389bd79b87f82c SQL Injection",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/970272"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/kishor-23/food-waste-management-system/issues/8"
},
{
"tags": [
"product"
],
"url": "https://github.com/kishor-23/food-waste-management-system/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-10-04T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-10-04T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-10-04T10:20:02.000Z",
"value": "VulDB entry last update"
}
],
"title": "kishor-23 food-waste-management-system Order Assignment Block admin.php sql injection",
"x_generator": [
"VulDB PVTS v202610"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-105168",
"datePublished": "2026-10-04T23:00:15.403Z",
"dateReserved": "2026-10-04T08:14:37.127Z",
"dateUpdated": "2026-10-04T23:00:15.403Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-105167 (GCVE-0-2026-105167)
Vulnerability from cvelistv5 – Published: 2026-10-04 22:45 – Updated: 2026-10-04 22:45
VLAI
EPSS
VEX
Title
kishor-23 food-waste-management-system donate.php sql injection
Summary
A vulnerability was determined in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The impacted element is an unknown function of the file admin/donate.php. Executing a manipulation of the argument location can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The project was informed of the problem early through an issue report but has not responded yet.
Severity
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/413399 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/413399/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-105167 | third-party-advisory |
| https://vuldb.com/submit/970271 | third-party-advisory |
| https://github.com/kishor-23/food-waste-managemen… | exploitissue-tracking |
| https://github.com/kishor-23/food-waste-managemen… | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| kishor-23 | food-waste-management-system |
Affected:
411989e3ecb82895e53dca7865f72145f03d7d93
Affected: b3a70b2c492dc9904de5be1ad9389bd79b87f82c cpe:2.3:a:kishor-23:food-waste-management-system:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:kishor-23:food-waste-management-system:*:*:*:*:*:*:*:*"
],
"product": "food-waste-management-system",
"vendor": "kishor-23",
"versions": [
{
"status": "affected",
"version": "411989e3ecb82895e53dca7865f72145f03d7d93"
},
{
"status": "affected",
"version": "b3a70b2c492dc9904de5be1ad9389bd79b87f82c"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "xbjds (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was determined in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The impacted element is an unknown function of the file admin/donate.php. Executing a manipulation of the argument location can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 7.5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "SQL Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-74",
"description": "Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-04T22:45:15.287Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-413399 | kishor-23 food-waste-management-system donate.php sql injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/413399"
},
{
"name": "VDB-413399 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/413399/cti"
},
{
"name": "CVE-2026-105167 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-105167"
},
{
"name": "Submit #970271 | kishor-23 food-waste-management-system b3a70b2c492dc9904de5be1ad9389bd79b87f82c SQL Injection",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/970271"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/kishor-23/food-waste-management-system/issues/7"
},
{
"tags": [
"product"
],
"url": "https://github.com/kishor-23/food-waste-management-system/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-10-04T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-10-04T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-10-04T10:19:58.000Z",
"value": "VulDB entry last update"
}
],
"title": "kishor-23 food-waste-management-system donate.php sql injection",
"x_generator": [
"VulDB PVTS v202610"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-105167",
"datePublished": "2026-10-04T22:45:15.287Z",
"dateReserved": "2026-10-04T08:14:33.743Z",
"dateUpdated": "2026-10-04T22:45:15.287Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-105166 (GCVE-0-2026-105166)
Vulnerability from cvelistv5 – Published: 2026-10-04 22:30 – Updated: 2026-10-04 22:30
VLAI
EPSS
VEX
Title
kishor-23 food-waste-management-system Food Donation Form fooddonateform.php insert sql injection
Summary
A vulnerability was found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The affected element is the function insert of the file fooddonateform.php of the component Food Donation Form. Performing a manipulation of the argument image-choice results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The project was informed of the problem early through an issue report but has not responded yet.
Severity
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/413398 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/413398/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-105166 | third-party-advisory |
| https://vuldb.com/submit/970270 | third-party-advisory |
| https://github.com/kishor-23/food-waste-managemen… | exploitissue-tracking |
| https://github.com/kishor-23/food-waste-managemen… | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| kishor-23 | food-waste-management-system |
Affected:
411989e3ecb82895e53dca7865f72145f03d7d93
Affected: b3a70b2c492dc9904de5be1ad9389bd79b87f82c cpe:2.3:a:kishor-23:food-waste-management-system:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:kishor-23:food-waste-management-system:*:*:*:*:*:*:*:*"
],
"modules": [
"Food Donation Form"
],
"product": "food-waste-management-system",
"vendor": "kishor-23",
"versions": [
{
"status": "affected",
"version": "411989e3ecb82895e53dca7865f72145f03d7d93"
},
{
"status": "affected",
"version": "b3a70b2c492dc9904de5be1ad9389bd79b87f82c"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "yukong (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The affected element is the function insert of the file fooddonateform.php of the component Food Donation Form. Performing a manipulation of the argument image-choice results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 7.5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "SQL Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-74",
"description": "Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-04T22:30:11.171Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-413398 | kishor-23 food-waste-management-system Food Donation Form fooddonateform.php insert sql injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/413398"
},
{
"name": "VDB-413398 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/413398/cti"
},
{
"name": "CVE-2026-105166 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-105166"
},
{
"name": "Submit #970270 | kishor-23 food-waste-management-system b3a70b2c492dc9904de5be1ad9389bd79b87f82c SQL Injection",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/970270"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/kishor-23/food-waste-management-system/issues/6"
},
{
"tags": [
"product"
],
"url": "https://github.com/kishor-23/food-waste-management-system/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-10-04T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-10-04T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-10-04T10:19:54.000Z",
"value": "VulDB entry last update"
}
],
"title": "kishor-23 food-waste-management-system Food Donation Form fooddonateform.php insert sql injection",
"x_generator": [
"VulDB PVTS v202610"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-105166",
"datePublished": "2026-10-04T22:30:11.171Z",
"dateReserved": "2026-10-04T08:14:30.191Z",
"dateUpdated": "2026-10-04T22:30:11.171Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2024-2557 (GCVE-0-2024-2557)
Vulnerability from cvelistv5 – Published: 2024-03-17 08:31 – Updated: 2024-08-27 14:14
VLAI
EPSS
VEX
Title
kishor-23 Food Waste Management System admin.php improper authorization
Summary
A vulnerability was found in kishor-23 Food Waste Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/admin.php. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-257056. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Severity
5.3 (Medium)
5.3 (Medium)
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-08-27 14:10 UTC
CWE
- CWE-285 - Improper Authorization
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://vuldb.com/?id.257056 | vdb-entry |
| https://vuldb.com/?ctiid.257056 | signaturepermissions-required |
| https://github.com/vanitashtml/CVE-Dumps/blob/mai… | exploit |
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| kishor-23 | Food Waste Management System |
Affected:
1.0
|
|
| kishor23 | food_waste_management_system |
Affected:
1.0
cpe:2.3:a:kishor23:food_waste_management_system:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-01T19:18:48.249Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "VDB-257056 | kishor-23 Food Waste Management System admin.php improper authorization",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "https://vuldb.com/?id.257056"
},
{
"name": "VDB-257056 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required",
"x_transferred"
],
"url": "https://vuldb.com/?ctiid.257056"
},
{
"tags": [
"exploit",
"x_transferred"
],
"url": "https://github.com/vanitashtml/CVE-Dumps/blob/main/Execute%20After%20Redirect%20-%20Food%20Management%20System.md"
}
],
"title": "CVE Program Container"
},
{
"affected": [
{
"cpes": [
"cpe:2.3:a:kishor23:food_waste_management_system:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "food_waste_management_system",
"vendor": "kishor23",
"versions": [
{
"status": "affected",
"version": "1.0"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-2557",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-08-27T14:10:44.311607Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-08-27T14:14:55.226Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Food Waste Management System",
"vendor": "kishor-23",
"versions": [
{
"status": "affected",
"version": "1.0"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "rjavenido22 (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was found in kishor-23 Food Waste Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/admin.php. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-257056. NOTE: The vendor was contacted early about this disclosure but did not respond in any way."
},
{
"lang": "de",
"value": "In kishor-23 Food Waste Management System 1.0 wurde eine Schwachstelle ausgemacht. Sie wurde als kritisch eingestuft. Das betrifft eine unbekannte Funktionalit\u00e4t der Datei /admin/admin.php. Durch Manipulieren mit unbekannten Daten kann eine improper authorization-Schwachstelle ausgenutzt werden. Der Angriff kann \u00fcber das Netzwerk angegangen werden. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-285",
"description": "CWE-285 Improper Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-03-17T08:31:04.409Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-257056 | kishor-23 Food Waste Management System admin.php improper authorization",
"tags": [
"vdb-entry"
],
"url": "https://vuldb.com/?id.257056"
},
{
"name": "VDB-257056 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/?ctiid.257056"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/vanitashtml/CVE-Dumps/blob/main/Execute%20After%20Redirect%20-%20Food%20Management%20System.md"
}
],
"timeline": [
{
"lang": "en",
"time": "2024-03-16T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2024-03-16T01:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2024-03-16T07:54:23.000Z",
"value": "VulDB entry last update"
}
],
"title": "kishor-23 Food Waste Management System admin.php improper authorization"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2024-2557",
"datePublished": "2024-03-17T08:31:04.409Z",
"dateReserved": "2024-03-16T06:49:12.935Z",
"dateUpdated": "2024-08-27T14:14:55.226Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}