kishor-23 food-waste-management-system Food Donation Form fooddonateform.php insert sql injection
A vulnerability was found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The affected element is the function insert of the file fooddonateform.php of the component Food Donation Form. Performing a manipulation of the argument image-choice results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The project was informed of the problem early through an issue report but has not responded yet.
CVE-2026-105166
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-105166
food-waste-management-system
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"cpes": [
"cpe:2.3:a:kishor-23:food-waste-management-system:*:*:*:*:*:*:*:*"
],
"vendor": "kishor-23",
"modules": [
"Food Donation Form"
],
"product": "food-waste-management-system",
"versions": [
{
"status": "affected",
"version": "411989e3ecb82895e53dca7865f72145f03d7d93"
},
{
"status": "affected",
"version": "b3a70b2c492dc9904de5be1ad9389bd79b87f82c"
}
]
}
]- Related CVEs
- CVE-2026-105166
Source reference:
/cveMetadata/cveId
Publisher severity
high
Source reference: /containers/cna/metrics
- Event
- #11665 · Revision 1
- Added to Heist Feed
- Publisher date