A flaw has been found in kishor-23 food-waste-management-system...

zetlyn/cve-ghsa vulnerability ghsa GHSA-6cjw-wvx3-vfm6 cve CVE-2026-105232 known 2026-10-05

https://github.com/advisories/GHSA-6cjw-wvx3-vfm6

Properties

cvss

cvss	7.3 receipt Source GitHub advisories Its words `7.3` Read by `field:cvss.score` Said since 2026-10-05 12:20 UTC Last answered 2026-10-05 12:22 UTC Original open at the source What the source handed over { "comments": 0, "credits": [], "cve_id": "CVE-2026-105232", "cvss": { "score": 7.3, "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" }, "cvss_severities": { "cvss_v3": { "score": 7.3, "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" }, "cvss_v4": { "score": 5.5, "vector_string": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } }, "cwes": [ { "cwe_id": "CWE-74", "name": "Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')" } ], "description": "A flaw has been found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The impacted element is an unknown function of the file delivery/deliverysignup.php of the component Registration Page. This manipulation of the argument username/email/location causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.", "ghsa_id": "GHSA-6cjw-wvx3-vfm6", "github_reviewed_at": null, "html_url": "https://github.com/advisories/GHSA-6cjw-wvx3-vfm6", "identifiers": [ { "type": "GHSA", "value": "GHSA-6cjw-wvx3-vfm6" }, { "type": "CVE", "value": "CVE-2026-105232" } ], "nvd_published_at": "2026-10-05T06:16:57Z", "published_at": "2026-10-05T06:30:23Z", "references": [ "https://nvd.nist.gov/vuln/detail/CVE-2026-105232", "https://github.com/kishor-23/food-waste-management-system/issues/14", "https://github.com/kishor-23/food-waste-management-system", "https://vuldb.com/cve/CVE-2026-105232", "https://vuldb.com/submit/972903", "https://vuldb.com/vuln/413432", "https://vuldb.com/vuln/413432/cti", "https://github.com/advisories/GHSA-6cjw-wvx3-vfm6" ], "repository_advisory_url": null, "severity": "medium", "source_code_location": "", "summary": "A flaw has been found in kishor-23 food-waste-management-system...", "type": "unreviewed", "updated_at": "2026-10-05T06:30:30Z", "url": "https://api.github.com/advisories/GHSA-6cjw-wvx3-vfm6", "vulnerabilities": [], "withdrawn_at": null }
cwe	CWE-74 receipt Source GitHub advisories Its words `CWE-74` Read by `field:cwes[].cwe_id` Said since 2026-10-05 12:20 UTC Last answered 2026-10-05 12:22 UTC Original open at the source What the source handed over { "comments": 0, "credits": [], "cve_id": "CVE-2026-105232", "cvss": { "score": 7.3, "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" }, "cvss_severities": { "cvss_v3": { "score": 7.3, "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" }, "cvss_v4": { "score": 5.5, "vector_string": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } }, "cwes": [ { "cwe_id": "CWE-74", "name": "Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')" } ], "description": "A flaw has been found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The impacted element is an unknown function of the file delivery/deliverysignup.php of the component Registration Page. This manipulation of the argument username/email/location causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.", "ghsa_id": "GHSA-6cjw-wvx3-vfm6", "github_reviewed_at": null, "html_url": "https://github.com/advisories/GHSA-6cjw-wvx3-vfm6", "identifiers": [ { "type": "GHSA", "value": "GHSA-6cjw-wvx3-vfm6" }, { "type": "CVE", "value": "CVE-2026-105232" } ], "nvd_published_at": "2026-10-05T06:16:57Z", "published_at": "2026-10-05T06:30:23Z", "references": [ "https://nvd.nist.gov/vuln/detail/CVE-2026-105232", "https://github.com/kishor-23/food-waste-management-system/issues/14", "https://github.com/kishor-23/food-waste-management-system", "https://vuldb.com/cve/CVE-2026-105232", "https://vuldb.com/submit/972903", "https://vuldb.com/vuln/413432", "https://vuldb.com/vuln/413432/cti", "https://github.com/advisories/GHSA-6cjw-wvx3-vfm6" ], "repository_advisory_url": null, "severity": "medium", "source_code_location": "", "summary": "A flaw has been found in kishor-23 food-waste-management-system...", "type": "unreviewed", "updated_at": "2026-10-05T06:30:30Z", "url": "https://api.github.com/advisories/GHSA-6cjw-wvx3-vfm6", "vulnerabilities": [], "withdrawn_at": null }
severity	medium receipt Source GitHub advisories Its words `medium` Read by `field:severity` Said since 2026-10-05 12:20 UTC Last answered 2026-10-05 12:22 UTC Original open at the source What the source handed over { "comments": 0, "credits": [], "cve_id": "CVE-2026-105232", "cvss": { "score": 7.3, "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" }, "cvss_severities": { "cvss_v3": { "score": 7.3, "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" }, "cvss_v4": { "score": 5.5, "vector_string": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } }, "cwes": [ { "cwe_id": "CWE-74", "name": "Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')" } ], "description": "A flaw has been found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The impacted element is an unknown function of the file delivery/deliverysignup.php of the component Registration Page. This manipulation of the argument username/email/location causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.", "ghsa_id": "GHSA-6cjw-wvx3-vfm6", "github_reviewed_at": null, "html_url": "https://github.com/advisories/GHSA-6cjw-wvx3-vfm6", "identifiers": [ { "type": "GHSA", "value": "GHSA-6cjw-wvx3-vfm6" }, { "type": "CVE", "value": "CVE-2026-105232" } ], "nvd_published_at": "2026-10-05T06:16:57Z", "published_at": "2026-10-05T06:30:23Z", "references": [ "https://nvd.nist.gov/vuln/detail/CVE-2026-105232", "https://github.com/kishor-23/food-waste-management-system/issues/14", "https://github.com/kishor-23/food-waste-management-system", "https://vuldb.com/cve/CVE-2026-105232", "https://vuldb.com/submit/972903", "https://vuldb.com/vuln/413432", "https://vuldb.com/vuln/413432/cti", "https://github.com/advisories/GHSA-6cjw-wvx3-vfm6" ], "repository_advisory_url": null, "severity": "medium", "source_code_location": "", "summary": "A flaw has been found in kishor-23 food-waste-management-system...", "type": "unreviewed", "updated_at": "2026-10-05T06:30:30Z", "url": "https://api.github.com/advisories/GHSA-6cjw-wvx3-vfm6", "vulnerabilities": [], "withdrawn_at": null }

7.3

receipt

Source: GitHub advisories
Its words: 7.3
Read by: field:cvss.score
Said since: 2026-10-05 12:20 UTC
Last answered: 2026-10-05 12:22 UTC
Original: open at the source

What the source handed over

{
  "comments": 0,
  "credits": [],
  "cve_id": "CVE-2026-105232",
  "cvss": {
    "score": 7.3,
    "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
  },
  "cvss_severities": {
    "cvss_v3": {
      "score": 7.3,
      "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
    },
    "cvss_v4": {
      "score": 5.5,
      "vector_string": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
    }
  },
  "cwes": [
    {
      "cwe_id": "CWE-74",
      "name": "Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')"
    }
  ],
  "description": "A flaw has been found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The impacted element is an unknown function of the file delivery/deliverysignup.php of the component Registration Page. This manipulation of the argument username/email/location causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.",
  "ghsa_id": "GHSA-6cjw-wvx3-vfm6",
  "github_reviewed_at": null,
  "html_url": "https://github.com/advisories/GHSA-6cjw-wvx3-vfm6",
  "identifiers": [
    {
      "type": "GHSA",
      "value": "GHSA-6cjw-wvx3-vfm6"
    },
    {
      "type": "CVE",
      "value": "CVE-2026-105232"
    }
  ],
  "nvd_published_at": "2026-10-05T06:16:57Z",
  "published_at": "2026-10-05T06:30:23Z",
  "references": [
    "https://nvd.nist.gov/vuln/detail/CVE-2026-105232",
    "https://github.com/kishor-23/food-waste-management-system/issues/14",
    "https://github.com/kishor-23/food-waste-management-system",
    "https://vuldb.com/cve/CVE-2026-105232",
    "https://vuldb.com/submit/972903",
    "https://vuldb.com/vuln/413432",
    "https://vuldb.com/vuln/413432/cti",
    "https://github.com/advisories/GHSA-6cjw-wvx3-vfm6"
  ],
  "repository_advisory_url": null,
  "severity": "medium",
  "source_code_location": "",
  "summary": "A flaw has been found in kishor-23 food-waste-management-system...",
  "type": "unreviewed",
  "updated_at": "2026-10-05T06:30:30Z",
  "url": "https://api.github.com/advisories/GHSA-6cjw-wvx3-vfm6",
  "vulnerabilities": [],
  "withdrawn_at": null
}

cwe

CWE-74

receipt

Source: GitHub advisories
Its words: CWE-74
Read by: field:cwes[].cwe_id
Said since: 2026-10-05 12:20 UTC
Last answered: 2026-10-05 12:22 UTC
Original: open at the source

What the source handed over

{
  "comments": 0,
  "credits": [],
  "cve_id": "CVE-2026-105232",
  "cvss": {
    "score": 7.3,
    "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
  },
  "cvss_severities": {
    "cvss_v3": {
      "score": 7.3,
      "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
    },
    "cvss_v4": {
      "score": 5.5,
      "vector_string": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
    }
  },
  "cwes": [
    {
      "cwe_id": "CWE-74",
      "name": "Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')"
    }
  ],
  "description": "A flaw has been found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The impacted element is an unknown function of the file delivery/deliverysignup.php of the component Registration Page. This manipulation of the argument username/email/location causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.",
  "ghsa_id": "GHSA-6cjw-wvx3-vfm6",
  "github_reviewed_at": null,
  "html_url": "https://github.com/advisories/GHSA-6cjw-wvx3-vfm6",
  "identifiers": [
    {
      "type": "GHSA",
      "value": "GHSA-6cjw-wvx3-vfm6"
    },
    {
      "type": "CVE",
      "value": "CVE-2026-105232"
    }
  ],
  "nvd_published_at": "2026-10-05T06:16:57Z",
  "published_at": "2026-10-05T06:30:23Z",
  "references": [
    "https://nvd.nist.gov/vuln/detail/CVE-2026-105232",
    "https://github.com/kishor-23/food-waste-management-system/issues/14",
    "https://github.com/kishor-23/food-waste-management-system",
    "https://vuldb.com/cve/CVE-2026-105232",
    "https://vuldb.com/submit/972903",
    "https://vuldb.com/vuln/413432",
    "https://vuldb.com/vuln/413432/cti",
    "https://github.com/advisories/GHSA-6cjw-wvx3-vfm6"
  ],
  "repository_advisory_url": null,
  "severity": "medium",
  "source_code_location": "",
  "summary": "A flaw has been found in kishor-23 food-waste-management-system...",
  "type": "unreviewed",
  "updated_at": "2026-10-05T06:30:30Z",
  "url": "https://api.github.com/advisories/GHSA-6cjw-wvx3-vfm6",
  "vulnerabilities": [],
  "withdrawn_at": null
}

severity

medium

receipt

Source: GitHub advisories
Its words: medium
Read by: field:severity
Said since: 2026-10-05 12:20 UTC
Last answered: 2026-10-05 12:22 UTC
Original: open at the source

What the source handed over

{
  "comments": 0,
  "credits": [],
  "cve_id": "CVE-2026-105232",
  "cvss": {
    "score": 7.3,
    "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
  },
  "cvss_severities": {
    "cvss_v3": {
      "score": 7.3,
      "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
    },
    "cvss_v4": {
      "score": 5.5,
      "vector_string": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
    }
  },
  "cwes": [
    {
      "cwe_id": "CWE-74",
      "name": "Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')"
    }
  ],
  "description": "A flaw has been found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The impacted element is an unknown function of the file delivery/deliverysignup.php of the component Registration Page. This manipulation of the argument username/email/location causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.",
  "ghsa_id": "GHSA-6cjw-wvx3-vfm6",
  "github_reviewed_at": null,
  "html_url": "https://github.com/advisories/GHSA-6cjw-wvx3-vfm6",
  "identifiers": [
    {
      "type": "GHSA",
      "value": "GHSA-6cjw-wvx3-vfm6"
    },
    {
      "type": "CVE",
      "value": "CVE-2026-105232"
    }
  ],
  "nvd_published_at": "2026-10-05T06:16:57Z",
  "published_at": "2026-10-05T06:30:23Z",
  "references": [
    "https://nvd.nist.gov/vuln/detail/CVE-2026-105232",
    "https://github.com/kishor-23/food-waste-management-system/issues/14",
    "https://github.com/kishor-23/food-waste-management-system",
    "https://vuldb.com/cve/CVE-2026-105232",
    "https://vuldb.com/submit/972903",
    "https://vuldb.com/vuln/413432",
    "https://vuldb.com/vuln/413432/cti",
    "https://github.com/advisories/GHSA-6cjw-wvx3-vfm6"
  ],
  "repository_advisory_url": null,
  "severity": "medium",
  "source_code_location": "",
  "summary": "A flaw has been found in kishor-23 food-waste-management-system...",
  "type": "unreviewed",
  "updated_at": "2026-10-05T06:30:30Z",
  "url": "https://api.github.com/advisories/GHSA-6cjw-wvx3-vfm6",
  "vulnerabilities": [],
  "withdrawn_at": null
}

Text

A flaw has been found in kishor-23 food-waste-management-system... A flaw has been found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The impacted element is an unknown function of the file delivery/deliverysignup.php of the component Registration Page. This manipulation of the argument username/email/location causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.