CVE-2026-108959: itsourcecode Online Cake Ordering System addtransacdetail.php sql injection
Published Oct 13, 2026
·Updated
A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. This impacts an unknown function of the file /addtransacdetail.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.
Affected Software
1 affected component
itsourcecode Online Cake Ordering System=1.0
Event History
Oct 13, 2026
CVE Published
via MITRE·02:45 AM
Data Sourced
via MITRE·02:45 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need?
The attack vector is network-based, but the CVSS assessment indicates that low privileges are required. No user interaction is required.
2
What is the assessed impact if exploitation succeeds?
The CVSS vector assesses low impact to confidentiality, integrity, and availability. The overall severity is medium, with a CVSS score of 6.3.
3
Is exploit code or exploitation information publicly available?
The exploit has been publicly disclosed and may be used. The exploit maturity is assessed as proof-of-concept.