CVE-2026-105229
waiting for further signalsZero needs more public information before it can validate it.GHSA-93ff-r34r-7gv6 ↗EUVD-2026-92251 ↗
description
The food-waste-management-system signup.php registration endpoint may be vulnerable to SQL injection through registration form fields. A remote attacker could manipulate database queries if they can reach the affected endpoint.
mitigation
Restrict access to the registration endpoint until it has been reviewed and corrected. Update its database operations to use parameterized queries, and deploy an upstream-fixed release when one is published.
outcome
No artifact: an exploit or check was attempted but could not be produced at this moment.
source signals
Public signals that triggered or updated the pipeline. These are inputs for the deltas above.
- 2026-10-05 04:45Zghsa: trigger signal, started the run
- 2026-10-05 04:45Zcve.org record for CVE-2026-105229
- 2026-10-11 23:36Zexploit reference (github.com)
this entry in the feed
GET /api/v1/feed/CVE-2026-105229
{ "etk_id": "ETK-2026-632", "cve_id": "CVE-2026-105229", "display_id": "CVE-2026-105229", "ghsa_id": "GHSA-93ff-r34r-7gv6", "euvd_id": "EUVD-2026-92251", "status": "published", "anchor_state": "anchored", "title": "SQL injection in food-waste-management-system registration", "summary": "The food-waste-management-system signup.php registration endpoint may be vulnerable to SQL injection through registration form fields. A remote attacker could manipulate database queries if they can reach the affected endpoint.", "mitigation": "Restrict access to the registration endpoint until it has been reviewed and corrected. Update its database operations to use parameterized queries, and deploy an upstream-fixed release when one is published.", "vendor": "kishor-23", "product": "food-waste-management-system", "affected": [ { "affected_notes": [], "affected_ranges": [ "411989e3ecb82895e53dca7865f72145f03d7d93", "b3a70b2c492dc9904de5be1ad9389bd79b87f82c" ], "ecosystem": null, "fixed_versions": [], "package_name": "food-waste-management-system", "purl": null } ], "cwes": null, "cvss_score": 7.3, "cvss_src": "cna_vendor", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "epss_score": 0.0026, "epss_percentile": 0.1706, "epss_asof": "2026-10-20", "automation": "deterministic", "check": false, "check_confidence_basis": null, "exploit": false, "pipeline_minutes": 15.95116415, "t0_at": "2026-10-05T04:45:13.938000+00:00", "signals": { "public_poc": { "at": "2026-10-05T04:45:13.938000+00:00", "days": 0, "is_lower_bound": false, "measured_at": "2026-10-05T04:45:13.938000+00:00", "url": "https://github.com/kishor-23/food-waste-management-system/issues/5" }, "trigger_signal": { "at": "2026-10-05T04:45:13.938000+00:00", "days": 0, "is_lower_bound": false, "measured_at": "2026-10-05T04:45:13.938000+00:00", "url": "https://github.com/advisories/GHSA-93ff-r34r-7gv6" } } }
published 2026-10-05 07:14Z
last change 2026-10-21 08:40Z
Need the technical details behind an entry?
Every entry here shows what we attempted and when. The technical details, the generated exploit that fired it and the evidence behind the verdict are not public. Tell us about your use case and we’ll get back to you about extended API access.