Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
2.1
CVE-2026-104052: itsourcecode Pet Shop Management System remote database manipulation
CVE-2026-104052 · published 17 days ago
Summary
The admin_reject_completed.php page in itsourcecode Pet Shop Management System lets an attacker change the ID value and insert malicious commands into the database from anywhere on the Internet. This can lead to unauthorized viewing, alteration, or deletion of data. Apply the vendor's security update or ensure the page validates and sanitizes all input before it reaches the database.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| itsourcecode | pet shop management system | 1.0 |
Original advisory text
itsourcecode Pet Shop Management System admin_reject_completed.php sql injection
A vulnerability was determined in itsourcecode Pet Shop Management System 1.0. The affected element is an unknown function of the file admin_reject_completed.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-74Injection
CWE-89SQL Injection
Timeline
Published2 Oct 2026
Updated14 Oct 2026
First seen2 Oct 2026
Track software like this
Free during beta