HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-105232 — A flaw has been found in kishor-23 food-waste-management-system 411989e3ecb82895...

·Source: NIST NVD

Updated:

Executive Summary

A flaw has been found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The impacted element is an unknown function of the file delivery/deliverysignup.php of the component Registration Page. This manipulation of the argument username/email/location causes sql injection. The attack can be initiated remotely. The exploit has

Analysis

A flaw has been found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The impacted element is an unknown function of the file delivery/deliverysignup.php of the component Registration Page. This manipulation of the argument username/email/location causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet. CVSS Score: 7.3. Published: 2026-10-05T06:16:57.610.

Indicators of Compromise (3)

SHA-1 (2)
411989e3ecb82895e53dca7865f72145f03d7d93
VirusTotalAnyRunJoe Sandbox
b3a70b2c492dc9904de5be1ad9389bd79b87f82c
VirusTotalAnyRunJoe Sandbox
CVE (1)
CVE-2026-105232
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Oct 5, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

Circle, Ripple and Standard Chartered invest in OKX

Crypto exchange OKX has secured strategic investment from Circle, QRT, Ripple and SC Ventures at a $25 billion valuation.

Finextra
CRITICALVulnerabilityNEW

Atlassian warns of critical file-access flaw in Jira, Confluence

Atlassian is warning customers of a critical vulnerability, tracked as CVE-2026-21589, that can be exploited for arbitrary file-access in multiple self-hosted Data Center products, including Confluence, Jira, and Bitbucket. [...]

CVE-2026-21589
BleepingComputer
CRITICALVulnerabilityNEW

NVD CRITICAL: CVE-2026-104070 — The Crayons plugin for SPIP before 3.5.0 contains a missing authorization vulner...

The Crayons plugin for SPIP before 3.5.0 contains a missing authorization vulnerability that allows unauthenticated attackers to modify arbitrary editable object fields by omitting the secu_ anti-forgery parameter in crayons_store.php, causing the authorization dispatcher to resolve an unconditionally-true handler instead of the proper modification check. Attackers can chain this flaw to write a m

CVE-2026-104070
NIST NVD