CVE-2026-82614: itsourcecode Online Medicine Delivery System Product Category Filter index.php loadResultList sql injection

Published Aug 31, 2026

Updated

A flaw has been found in itsourcecode Online Medicine Delivery System 1.0. This vulnerability affects the function loadResultList of the file /index.php?q=product of the component Product Category Filter Interface. Executing a manipulation of the argument Category can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used.

Affected Software

1 affected component

itsourcecode Online Medicine Delivery System=1.0

Event History

Aug 31, 2026

CVE Published

via MITRE·04:15 AM

Data Sourced

via MITRE·04:15 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

A remote, unauthenticated attacker can exploit the SQL injection through the Product Category Filter Interface by manipulating the Category argument handled by loadResultList.

Which installations are known to be affected?

The affected product is itsourcecode Online Medicine Delivery System version 1.0. The vulnerable functionality is in /index.php?q=product.

How urgent is remediation?

The issue is rated high with a 7.3 severity score, and a public exploit has been published. The described impact includes potential loss of confidentiality, integrity, and availability.