CVE-2026-112087— itsourcecode Online Cake Ordering System confirm.php sql injection
Quick assessment
Affected
itsourcecode Online Cake Ordering System
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 itsourcecode 在线蛋糕订购系统 1.0 中发现一处安全缺陷。该问题涉及文件 confirm.php 中某些未知的处理逻辑。对参数 cancel 的恶意篡改可导致 SQL 注入漏洞。攻击者可远程发起此类攻击。该漏洞的利用代码已公开，可能被用于实际攻击。
Possible ATT&CK Techniques 2 AI
T1059 · Command and Scripting Interpreter T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-112087
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
itsourcecode Online Cake Ordering System confirm.php sql injection
Source: CVE Program / CVE List V5
Vulnerability Description
A weakness has been identified in itsourcecode Online Cake Ordering System 1.0. This issue affects some unknown processing of the file confirm.php. This manipulation of the argument cancel causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| itsourcecode | Online Cake Ordering System | 1.0 |
cpe:2.3:a:itsourcecode:online_cake_ordering_system:*:*:*:*:*:*:*:*
|
|
II. Public POCs for CVE-2026-112087
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-112087
请登录查看更多情报信息。
Proof of Concept for CVE-2026-112087 (1)
Other References for CVE-2026-112087 (1)
IV. Related Vulnerabilities
Same product: Online Cake Ordering System
-
CVE-2026-108959
itsourcecode Online Cake Ordering System addtransacdetail.ph -
CVE-2025-15167
itsourcecode Online Cake Ordering System detailtransac.php s -
CVE-2025-15166
itsourcecode Online Cake Ordering System updatesupplier.php -
CVE-2025-15165
itsourcecode Online Cake Ordering System updatecustomer.php -
CVE-2025-14832
itsourcecode Online Cake Ordering System updateproduct.php s
Same vendor: itsourcecode
-
CVE-2026-108959
itsourcecode Online Cake Ordering System addtransacdetail.ph -
CVE-2026-108928
itsourcecode Online Admission System sum.php sql injection -
CVE-2026-108927
itsourcecode Baptism Information Management System pbaptism. -
CVE-2026-108926
itsourcecode Baptism Information Management System ebaptism. -
CVE-2026-105254
itsourcecode Online Admission System schoolyear.php sql inje
Same weakness: CWE-89
-
CVE-2026-112252
Wuxi Wubang Security Software Wubang Five-in-One Safety Prod -
CVE-2026-112153
vraj404 Criminal-Management-System Officer Registration Form -
CVE-2026-112306
NocoBase plugin-collection-sql through 2.2.28 SQL Injection -
CVE-2026-112152
vraj404 Criminal-Management-System Search searchOff.php mysq -
CVE-2026-112151
vraj404 Criminal Management System Submission Form home.php
V. Comments for CVE-2026-112087
No comments yet