CVE-2026-114384
MEDIUM
NVD
CVSS Score
6.3
Severity
MEDIUM
Published
Oct 21, 2026
Vendor
unknown
Description
A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. Affected is an unknown function of the file /transactionsave.php. Such manipulation of the argument del leads to sql injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.