CVE-2026-104052

MediumCVSS 6.3

Published: 02/10/2026(UTC)Updated: 06/10/2026(UTC)Translated: 02/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.20%

9th percentile - higher than 9% of all known CVEs

Summary

A vulnerability was determined in itsourcecode Pet Shop Management System 1.0. The affected element is an unknown function of the file admin_reject_completed.php. Manipulation of the argument ID causes SQL injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.

Risk Assessment

The risk includes potential unauthorized access to data or modification, leading to confidentiality and integrity compromise.

Recommendation

Apply available patches or temporarily disable the system, and use parameterized queries.

Other vulnerabilities in itsourcecode Pet Shop Management System

CVE-2026-104053Medium
A vulnerability was identified in itsourcecode Pet Shop Management System 1.0. The impacted element is an unknown function of the file admin_reservefilter.php. Manipulation of the argument filter leads to SQL injection. The attack can be launched remotely. The exploit is publicly available and might be used.

Original NVD description (English source)

A vulnerability was determined in itsourcecode Pet Shop Management System 1.0. The affected element is an unknown function of the file admin_reject_completed.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS