CVE-2026-105232

A vulnerability has been found in kishor-23 food-waste-management-system. This affects an unknown function of the file login.php of the Login Flow component. Manipulation of the PHPSESSID argument leads to session fixation, and the attack can be launched remotely. The exploit has been disclosed to the public and may be used; the product does not use versioning, so affected release information is unavailable.

A vulnerability was detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The affected element is an unknown function of the file admin/signup.php of the component Admin Registration. The manipulation of the argument email/username/location results in sql injection. It is possible to launch the attack remotely. The exploit is now public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The project was informed of the problem early through an issue report but has not responded yet.

A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Impacted is an unknown function of the file delivery/deliverymyord.php. The manipulation of the argument delivery_person_id/order_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.

A vulnerability was identified in kishor-23 food-waste-management-system within signup.php of the User Registration Endpoint component. Manipulating the email/name/gender arguments leads to SQL injection, and the attack can be performed remotely. The exploit is publicly available and may be used for attacks.

Missing authentication in kishor-23 food-waste-management-system. Affects the file admin/signup.php in the Admin Signup component, where manipulation of the sign argument causes missing authentication. The attack can be initiated remotely, and the exploit is public. The project has not responded.

SQL injection vulnerability in kishor-23 food-waste-management-system. Affects the file delivery/delivery.php in the Take Order Handler component, where manipulation of order_id/delivery_person_id arguments leads to SQL injection. The attack can be executed remotely, and the exploit is public. The project has not responded.

A vulnerability was determined in kishor-23 food-waste-management-system (specific commits). The impacted element is an unknown function of the file admin/donate.php. Executing a manipulation of the argument location can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. This product utilizes a rolling release system, so version information is not disclosed; the project was informed but has not responded yet.

A vulnerability was found in kishor-23 food-waste-management-system (specific commits). The affected element is the function insert of the file fooddonateform.php of the component Food Donation Form. Performing a manipulation of the argument image-choice results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used. This product adopts a rolling release strategy, so version details cannot be specified; the project was informed but has not responded yet.