CVE-2026-4472: itsourcecode Online Frozen Foods Ordering System admin_edit_supplier.php sql injection
A security vulnerability has been detected in itsourcecode Online Frozen Foods Ordering System 1.0. This vulnerability affects unknown code of the file /admin/admineditsupplier.php. The manipulation of the argument SupplierName leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-4472?
CVE-2026-4472 is classified as a critical vulnerability due to its SQL injection potential in the admin_edit_supplier.php file.
How do I fix CVE-2026-4472?
To fix CVE-2026-4472, ensure that input validation and prepared statements are implemented in the code handling user inputs in the affected SQL queries.
Which version of the Online Frozen Foods Ordering System is affected by CVE-2026-4472?
CVE-2026-4472 affects version 1.0 of the itsourcecode Online Frozen Foods Ordering System.
What is the impact of exploiting CVE-2026-4472?
Exploiting CVE-2026-4472 can allow an attacker to execute arbitrary SQL code on the database, potentially leading to data exposure or alteration.
Where is the vulnerability located in the itsourcecode Online Frozen Foods Ordering System?
CVE-2026-4472 is located in the /admin/admin_edit_supplier.php file of the itsourcecode Online Frozen Foods Ordering System.