CVE-2026-116101: itsourcecode Online Cake Ordering System deletetransac.php sql injection
Published Oct 26, 2026
·Updated
A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /deletetransac.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used.
Affected Software
1 affected component
itsourcecode Online Cake Ordering System=1.0
Event History
Oct 26, 2026
CVE Published
via MITRE·12:15 AM
Data Sourced
via MITRE·12:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
The attack can be performed remotely, but the CVSS vector indicates low privileges are required. No user interaction is required.
2
Is exploit code available?
Yes. The exploit has been made public and could be used.
3
What is known about the affected deployment?
The reported affected product is itsourcecode Online Cake Ordering System version 1.0. The vulnerable request reaches /deletetransac.php through the ID argument.