CVE-2026-105231
waiting for further signalsZero needs more public information before it can validate it.GHSA-7g4f-f5xc-4jqc ↗EUVD-2026-92253 ↗
description
The Admin Registration endpoint in kishor-23 food-waste-management-system is affected by SQL injection through registration-related fields. A remote attacker may influence database queries through this endpoint; the available evidence does not establish any authentication requirement.
mitigation
Restrict network and administrative access to the admin registration endpoint until an upstream update is available. Ensure its database operations use parameterized queries and server-side input validation.
outcome
No artifact: an exploit or check was attempted but could not be produced at this moment.
source signals
Public signals that triggered or updated the pipeline. These are inputs for the deltas above.
- 2026-10-05 05:15Zghsa: trigger signal, started the run
- 2026-10-05 05:15Zcve.org record for CVE-2026-105231
- 2026-10-11 23:36Zexploit reference (github.com)
this entry in the feed
GET /api/v1/feed/CVE-2026-105231
{ "etk_id": "ETK-2026-630", "cve_id": "CVE-2026-105231", "display_id": "CVE-2026-105231", "ghsa_id": "GHSA-7g4f-f5xc-4jqc", "euvd_id": "EUVD-2026-92253", "status": "published", "anchor_state": "anchored", "title": "SQL injection in food-waste-management-system admin registration", "summary": "The Admin Registration endpoint in kishor-23 food-waste-management-system is affected by SQL injection through registration-related fields. A remote attacker may influence database queries through this endpoint; the available evidence does not establish any authentication requirement.", "mitigation": "Restrict network and administrative access to the admin registration endpoint until an upstream update is available. Ensure its database operations use parameterized queries and server-side input validation.", "vendor": "kishor-23", "product": "food-waste-management-system", "affected": [ { "affected_notes": [], "affected_ranges": [ "411989e3ecb82895e53dca7865f72145f03d7d93", "b3a70b2c492dc9904de5be1ad9389bd79b87f82c" ], "ecosystem": null, "fixed_versions": [], "package_name": "food-waste-management-system", "purl": null } ], "cwes": null, "cvss_score": 7.3, "cvss_src": "cna_vendor", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "epss_score": 0.0026, "epss_percentile": 0.1705, "epss_asof": "2026-10-20", "automation": "deterministic", "check": false, "check_confidence_basis": null, "exploit": false, "pipeline_minutes": 19.802952883333333, "t0_at": "2026-10-05T05:15:17.185000+00:00", "signals": { "public_poc": { "at": "2026-10-05T05:15:17.185000+00:00", "days": 0, "is_lower_bound": false, "measured_at": "2026-10-05T05:15:17.185000+00:00", "url": "https://github.com/kishor-23/food-waste-management-system/issues/15" }, "trigger_signal": { "at": "2026-10-05T05:15:17.185000+00:00", "days": 0, "is_lower_bound": false, "measured_at": "2026-10-05T05:15:17.185000+00:00", "url": "https://github.com/advisories/GHSA-7g4f-f5xc-4jqc" } } }
published 2026-10-05 06:54Z
last change 2026-10-21 06:34Z
Need the technical details behind an entry?
Every entry here shows what we attempted and when. The technical details, the generated exploit that fired it and the evidence behind the verdict are not public. Tell us about your use case and we’ll get back to you about extended API access.