HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-115999 — A vulnerability has been found in mansi-k Restaurant_IMS d7ad49f61ab7cc1ec6eb359...

·Source: NIST NVD

Updated:

Executive Summary

A vulnerability has been found in mansi-k Restaurant_IMS d7ad49f61ab7cc1ec6eb359ac2b5378bdbde0694. Affected is the function mysqli_connect of the file lsmodal.php. The manipulation of the argument login_id/epsw leads to sql injection. Remote exploitation of the attack is possible. This product follows a rolling release approach for continuous delivery, so version details for affected or updated re

Analysis

A vulnerability has been found in mansi-k Restaurant_IMS d7ad49f61ab7cc1ec6eb359ac2b5378bdbde0694. Affected is the function mysqli_connect of the file lsmodal.php. The manipulation of the argument login_id/epsw leads to sql injection. Remote exploitation of the attack is possible. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The vendor was contacted early about this disclosure but did not respond in any way. CVSS Score: 7.3. Published: 2026-10-25T02:16:26.913.

Indicators of Compromise (2)

SHA-1 (1)
d7ad49f61ab7cc1ec6eb359ac2b5378bdbde0694
VirusTotalAnyRunJoe Sandbox
CVE (1)
CVE-2026-115999
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Oct 25, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerability

CISO Problems That Can't Be Solved With Technology

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/ciso-problems-that-cant-be-solved-technology-image_small-4-a-33248.jpg" align=right hspace=4><b>Operational Struggles and Arrogant Vendors Mean Tool Churn Is Likely to Continue</b><br>No matter how advanced or powerful cybersecurity tools become, they will never be able to fix many of the key problems that confront cyber defenders

Bank Info Security
LOWAi

Fake Anthropic AI previews lure in overeager employees

Everyone wants to know what Anthropic is up to, and hackers are gleefully exploiting the fact. New research from cybersecurity company Cofense describes a phishing campaign that hooks overeager enterprise users by making them think they are getting an invite to a private invite-only Anthropic preview. In reality, adversarial actors are trying to steal Google and Microsoft login credentials, exploi

CSO Online
MEDIUMVulnerability

Monzo launches in Spain

British digital bank has officially launched in Spain, marking its first move onto continental Europe.

Finextra