CVE-2026-82610: itsourcecode Online Medicine Delivery System Login login.php employeeAuthentication sql injection
A security flaw has been discovered in itsourcecode Online Medicine Delivery System 1.0. Affected is the function Employee::employeeAuthentication of the file /rider/login.php of the component Login Interface. The manipulation of the argument empemail results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
A remote, unauthenticated attacker can target the Login Interface by manipulating the emp_email argument handled by Employee::employeeAuthentication in /rider/login.php. No user interaction is required.
Is exploit code available?
Yes. The available data states that an exploit has been publicly released and may be used in attacks.
What security impact can successful exploitation have?
The provided severity vector indicates potential low impact to confidentiality, integrity, and availability. The issue is classified as SQL injection.