Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-115999— mansi-k Restaurant_IMS lsmodal.php mysqli_connect sql injection

Quick assessment

Affected
mansi-k Restaurant_IMS
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 mansi-k Restaurant_IMS（提交哈希：d7ad49f61ab7cc1ec6eb359ac2b5378bdbde0694）中发现一个漏洞。该漏洞位于文件 lsmodal.php 中的 mysqli_connect 函数。攻击者可通过操纵 login_id 和 epsw 参数引发 SQL 注入攻击，且该攻击可被远程利用。由于该产品采用滚动发布模式以实现持续交付，因此未提供受影响版本或已修复版本的具体版本信息。披露方已在早期联系厂商，但厂商未作出任何回应。

CVSS 7.3 · High
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-115999

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
mansi-k Restaurant_IMS lsmodal.php mysqli_connect sql injection
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability has been found in mansi-k Restaurant_IMS d7ad49f61ab7cc1ec6eb359ac2b5378bdbde0694. Affected is the function mysqli_connect of the file lsmodal.php. The manipulation of the argument login_id/epsw leads to sql injection. Remote exploitation of the attack is possible. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The vendor was contacted early about this disclosure but did not respond in any way.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
mansi-k Restaurant_IMS d7ad49f61ab7cc1ec6eb359ac2b5378bdbde0694 cpe:2.3:a:mansi-k:restaurant_ims:*:*:*:*:*:*:*:*

II. Public POCs for CVE-2026-115999

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-115999

请登录查看更多情报信息。

IV. Related Vulnerabilities

Same weakness: CWE-89