Live › vulnerability › CVE-2026-114380
Go to dashboarditsourcecode Online Cake Ordering System 1.0 has an SQL injection in /inserttrans.php where the prcd argument is passed unsanitized into a database query. A remote attacker can send crafted requests to read or change the store's database, and a public exploit exists.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Sites running the itsourcecode Online Cake Ordering System 1.0 PHP application that expose /inserttrans.php. The sources do not say whether any patched version exists. Teams not running this script can skip it.
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. Impacted is an unknown function of the file /inserttrans.php. Performing a manipulation of the argument prcd results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used.
This page as .md · .json · in your agent: get_signal("CVE-2026-114380")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.