CVE-2026-95868

MediumCVSS 6.3/10Last modified Sep 23, 2026

Description

A weakness has been identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Affected by this issue is the function mysqli_query of the file admin/display_menu.php of the component Search Form. This manipulation of the argument s1 causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.

Metrics

CVSS 3.1 6.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-74 CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Sep 23, 2026
Last modified: Sep 23, 2026
NVD status: Deferred

Related CVEs from 2026

CVE-2026-95877.1An authenticated local file inclusion vulnerability exists in Sangoma Switchvox SMB Edition 8.3 (104997). The play_file functionality accept CVE-2026-95887.0A stored cross-site scripting (XSS) vulnerability exists in Sangoma Switchvox SMB Edition 8.3 (104997) within the voicemail notification tem CVE-2026-95899.3Missing authorization in the configuration cascade operations of the Collaboration Server in Unblu inc. Unblu Spark 7.0 through 8.36.1-hotfi CVE-2026-958975.5A security vulnerability has been detected in Dask up to 2026.8.0. This affects the function from_npy_stack of the file dask/array/core.py o CVE-2026-95905.3Improper access control in the permission validation component in Devolutions Server 2026.1.19 and earlier allows an authenticated user with CVE-2026-959045.5Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.CVE-2026-95916.9Cross-site request forgery (CSRF) in NewsItemApiController in SimplCommerce prior to commit 6233d73e allows an unauthenticated remote attack CVE-2026-95927.5SEPPmail Secure Email Gateway & SEPPmail Cloud before version 15.0.4.2 allows an attacker to replay & hijack a user session in the GINA web CVE-2026-959247.3A vulnerability has been found in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewe CVE-2026-959257.3A vulnerability was found in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /CVE-2026-959267.3A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. The impacted element is an unknown function of the f CVE-2026-959277.3A vulnerability was identified in SourceCodester Online Reviewer Management System 1.0. This affects an unknown function of the file /review