CVE-2026-2865

A vulnerability was found in itsourcecode Agri-Trading Online Shopping System 1.0. This impacts an unknown function of the file admin/productcontroller.php of the component HTTP POST Request Handler. Performing a manipulation of the argument Product results in sql injection. The attack may be initiated remotely. The exploit has been made public and could be used.

• CWE-74
• CWE-89
• CWE-89

• https://github.com/wan1yan/cve/issues/3Exploit, Issue Tracking, Mitigation, Third Party Advisory
• https://itsourcecode.com/Product
• https://vuldb.com/?ctiid.347104Permissions Required, VDB Entry
• https://vuldb.com/?id.347104Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.754556Third Party Advisory, VDB Entry

Published

Feb 21, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-28640In checkCallerIsCertInstallerOrSelfInProfile of CredentialSt…7.8
• CVE-2026-28641In shouldDisableUninstallButton of ApplicationActionButtonsP…7.8
• CVE-2026-28642In executeRequest of ActivityStarter.java, there is a possib…7.8
• CVE-2026-28644In startNextMatchingActivity of ActivityTaskManagerService.j…7.8
• CVE-2026-28647In updateState of DeviceAdminAppsPreferenceController.java, …7.8
• CVE-2026-28648In Settings, there is a possible permission bypass due to a …7.8
• CVE-2026-28650In setHiddenWhileSuspended of WindowState.java, there is a p…7.8
• CVE-2026-28652In multiple functions of RangingServiceImpl.java, there is a…3.1
• CVE-2026-28653In multiple functions of rw_t3t.cc, there is a possible out …7.8
• CVE-2026-28655In multiple functions of RemoteViews.java, there is a possib…7.8
• CVE-2026-28656In multiple functions of DeviceAdminAdd.java, there is a pos…7.3
• CVE-2026-28657In onActivityResult of AppWidgetConfigActivityProxy.java, th…7.8