CVE-2026-4470

A security flaw has been discovered in itsourcecode Online Frozen Foods Ordering System 1.0. Affected by this issue is some unknown functionality of the file /admin/admin_edit_menu.php. Performing a manipulation of the argument product_name results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks.

• CWE-74
• CWE-89
• CWE-89

• https://github.com/sjkdhl/public/issues/3Exploit, Mitigation, Third Party Advisory
• https://itsourcecode.com/Product
• https://vuldb.com/?ctiid.351760Permissions Required, VDB Entry
• https://vuldb.com/?id.351760Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.772882Third Party Advisory, VDB Entry

Published

Mar 20, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-44694n8n-MCP is an MCP server that provides AI assistants access …9.1
• CVE-2026-44695Outline is a service that allows for collaborative documenta…6.5
• CVE-2026-44696OpenProject is open-source, web-based project management sof…5.7
• CVE-2026-44697Klever-Go is the Go implementation of the Klever blockchain …8.6
• CVE-2026-44698Home Assistant is open source home automation software that …8.3
• CVE-2026-44699LibJWT is a C JSON Web Token Library. From 3.0.0 to 3.3.2, l…9.1
• CVE-2026-44700Elixir WebRTC is an Elixir implementation of the W3C WebRTC …8.7
• CVE-2026-44705tmp is a temporary file and directory creator for node.js. P…8.2
• CVE-2026-44706Chatwoot is a customer engagement suite. From 2.2.0 to befor…8.5
• CVE-2026-44707Chatwoot is a customer engagement suite. From 2.14.0 to befo…6.8
• CVE-2026-44708Mistune is a Python Markdown parser with renderers and plugi…6.1
• CVE-2026-44709pam_usb provides hardware authentication for Linux using ord…7.8