CVE-2026-105170

A vulnerability was identified in kishor-23 food-waste-management-system within signup.php of the User Registration Endpoint component. Manipulating the email/name/gender arguments leads to SQL injection, and the attack can be performed remotely. The exploit is publicly available and may be used for attacks.

SQL injection vulnerability in kishor-23 food-waste-management-system. Affects the file delivery/delivery.php in the Take Order Handler component, where manipulation of order_id/delivery_person_id arguments leads to SQL injection. The attack can be executed remotely, and the exploit is public. The project has not responded.

A vulnerability was determined in kishor-23 food-waste-management-system (specific commits). The impacted element is an unknown function of the file admin/donate.php. Executing a manipulation of the argument location can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. This product utilizes a rolling release system, so version information is not disclosed; the project was informed but has not responded yet.

A vulnerability was found in kishor-23 food-waste-management-system (specific commits). The affected element is the function insert of the file fooddonateform.php of the component Food Donation Form. Performing a manipulation of the argument image-choice results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used. This product adopts a rolling release strategy, so version details cannot be specified; the project was informed but has not responded yet.