CVE-2026-82611: itsourcecode Online Medicine Delivery System Customer Login login.php cusAuthentication sql injection

Published Aug 31, 2026

Updated

A weakness has been identified in itsourcecode Online Medicine Delivery System 1.0. Affected by this vulnerability is the function Customer::cusAuthentication of the file /login.php of the component Customer Login Interface. This manipulation of the argument UUSERNAME causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.

Affected Software

1 affected component

itsourcecode Online Medicine Delivery System=1.0

Event History

Aug 31, 2026

CVE Published

via MITRE·03:30 AM

Data Sourced

via MITRE·03:30 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

The attack can be initiated remotely and requires no privileges or user interaction. An attacker able to reach the Customer Login Interface can target the U_USERNAME input handled by /login.php.

Is public exploit code available?

Yes. The available data states that an exploit has been made public and could be used in attacks.

What security impact is indicated?

The supplied severity vector rates confidentiality, integrity, and availability impact as low, with an overall CVSS severity of high (7.3). The vulnerability is classified as SQL Injection.