{"id":"CVE-2026-115999","kind":"vulnerability","aliases":["CVE-2026-115999"],"related":[],"title":"Restaurant_IMS: SQL injection in lsmodal.php login_id lets attackers query the database","description":"A vulnerability has been found in mansi-k Restaurant_IMS d7ad49f61ab7cc1ec6eb359ac2b5378bdbde0694. Affected is the function mysqli_connect of the file lsmodal.php. The manipulation of the argument login_id/epsw leads to sql injection. Remote exploitation of the attack is possible. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The vendor was contacted early about this disclosure but did not respond in any way.","summary":"The Restaurant_IMS project by mansi-k has an SQL injection flaw in the lsmodal.php file, where the login_id and epsw arguments are not sanitized before reaching a mysqli query. A remote attacker can send crafted input to read or change data in the application's database.","severity":"high","cvss":7.5,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Restaurant_IMS","fixed":[],"affected":"commit d7ad49f61ab7cc1ec6eb359ac2b5378bdbde0694 (rolling release, other commits unknown)","ecosystem":"other"}],"ecosystems":[],"tags":["mysql","other","php","restaurant-ims","self-hosted"],"not_affected_if":["lsmodal-not-exposed","not-deployed"],"how_to_check":"Look for lsmodal.php in the web root of your Restaurant_IMS deployment. Run 'git rev-parse HEAD' in the checkout: commit d7ad49f61ab7cc1ec6eb359ac2b5378bdbde0694 is the one named in the CVE. Later commits are not confirmed fixed or vulnerable. Check whether the login_id and epsw values reach mysqli queries without prepared statements.","fix":"No fix available. Vendor did not respond and the project is rolling-release with no patched version. Do not expose this app; if you must run it, rewrite the lsmodal.php login query to use mysqli prepared statements (bind login_id and epsw) and put authentication in front of it.","status":"open","published_at":"2026-10-25T02:16:26+00:00","first_seen_at":"2026-10-25T04:02:13+00:00","triaged_at":"2026-10-25T04:03:22+00:00","updated_at":"2026-10-25T04:03:46+00:00","category":"other","confidence":0.7,"triage":{"at":"2026-10-25T04:03:22Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"internet","title":"Restaurant_IMS: SQL injection in lsmodal.php login_id lets attackers query the database","impact":"high","summary":"The Restaurant_IMS project by mansi-k has an SQL injection flaw in the lsmodal.php file, where the login_id and epsw arguments are not sanitized before reaching a mysqli query. A remote attacker can send crafted input to read or change data in the application's database.","category":"other","nicknames":[],"who_cares":["restaurant-ims","php","mysql","self-hosted"],"confidence":0.6,"needs_auth":"unknown","worst_case":"Attacker reads or alters the restaurant database through injected SQL queries","analyst_note":"Sources do not give a fixed version or a workaround, and the vendor did not respond; check the NVD entry and the project repository for any patch or mitigation.","how_to_check":"- Check whether the deployment includes `lsmodal.php` in the web root (unknown for exact paths in the sources)\n- Confirm the commit in use: `d7ad49f61ab7cc1ec6eb359ac2b5378bdbde0694` (unknown whether the sources give a version tag)","needs_analyst":true,"not_affected_if":["not-deployed","lsmodal-not-exposed"],"who_is_affected":"Teams that run the mansi-k Restaurant_IMS application from this commit or a similar snapshot, where lsmodal.php is reachable over the web. The sources say the product uses a rolling release and the vendor did not respond, so no patched version is known. Teams that do not run this project can skip it.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000636,"input_tokens":3412,"output_tokens":589,"severity_before":"high"},"analyst_status":"done","analyst_note":"Sources do not give a fixed version or a workaround, and the vendor did not respond; check the NVD entry and the project repository for any patch or mitigation.","search":"'-115999':16A,19A '-2026':15A,18A 'affect':92C,134C 'applic':77B 'approach':126C 'argument':54B,106C 'attack':10A,65B,117C 'chang':73B 'connect':97C 'contact':144C 'continu':128C 'craft':68B 'cve':14A,17A 'd7ad49f61ab7cc1ec6eb359ac2b5378bdbde0694':91C 'data':74B 'databas':13A,79B 'deliveri':129C 'detail':132C 'disclosur':148C 'earli':145C 'epsw':53B 'exploit':114C 'file':47B,100C 'flaw':43B 'follow':122C 'found':84C 'function':95C 'host':30B 'id':8A,51B 'id/epsw':108C 'im':2A,27B,33B,90C 'ims':21A 'inject':4A,42B,112C 'input':69B 'k':38B,88C 'lead':109C 'let':9A 'login':7A,50B,107C 'lsmodal.php':6A,46B,101C 'manipul':103C 'mansi':37B,87C 'mansi-k':36B,86C 'mysql':22B 'mysqli':61B,96C 'php':24B 'possibl':119C 'product':121C 'project':34B 'provid':140C 'queri':11A,62B 'reach':59B 'read':71B 'releas':125C,137C 'remot':64B,113C 'respond':152C 'restaur':1A,26B,32B,89C 'restaurant':20A 'restaurant-im':25B 'roll':124C 'sanit':57B 'self':29B 'self-host':28B 'send':67B 'sql':3A,41B,111C 'updat':136C 'vendor':142C 'version':131C 'vulner':81C 'way':155C","nicknames":[],"mitigations":[],"who_affected":"Teams that run the mansi-k Restaurant_IMS application from this commit or a similar snapshot, where lsmodal.php is reachable over the web. The sources say the product uses a rolling release and the vendor did not respond, so no patched version is known. Teams that do not run this project can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-25T02:16:26+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"cna@vuldb.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-115999","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-115999","severity":null,"published_at":"2026-10-25T02:16:26+00:00","modified_at":"2026-10-25T02:16:26+00:00","first_seen_at":"2026-10-25T04:02:13+00:00","fetched_at":"2026-10-25T04:02:13+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-115999:809","url":null,"severity":null,"published_at":"2026-10-25T04:03:46+00:00","modified_at":"2026-10-25T04:03:46+00:00","first_seen_at":"2026-10-25T04:03:46+00:00","fetched_at":"2026-10-25T04:03:46+00:00","note":"VulDB/NVD only; no vendor advisory, vendor silent, rolling release, no fix, no PoC or exploitation seen, no social chatter checked. Nothing verified."}],"documents":[{"id":3380,"url":"https://vuldb.com/vuln/426096","title":"VulDB 426096: Restaurant_IMS lsmodal.php SQL injection","kind":"advisory","source":"analyst","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null},{"id":3381,"url":"https://github.com/mansi-k/restaurant_ims","title":"mansi-k/Restaurant_IMS repository","kind":"other","source":"analyst","text":null,"published_at":null,"relation":"describes","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}