CVE-2026-114378
MEDIUM
NVD
CVSS Score
6.3
Severity
MEDIUM
Published
Oct 21, 2026
Vendor
unknown
Description
A vulnerability was detected in itsourcecode Online Cake Ordering System 1.0. This affects an unknown part of the file /deleteproduct.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public and may be used.