Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
2.1
CVE-2026-104053: Pet Shop Management System 1.0 remote SQL injection risk
CVE-2026-104053 · published 17 days ago
Summary
The Pet Shop Management System version 1.0 contains a flaw in the admin_reservefilter.php file that lets an attacker add malicious code to the database queries. This can be triggered over the internet and could let an attacker view, change, or delete data. Apply the vendor's security update or disable the vulnerable function until a patch is installed.
Original advisory text
A vulnerability was identified in itsourcecode Pet Shop Management System 1.0. The impacted element is an unknown function of the file admin_reservefilter.php. Such manipulation of the argument fil...
A vulnerability was identified in itsourcecode Pet Shop Management System 1.0. The impacted element is an unknown function of the file admin_reservefilter.php. Such manipulation of the argument filter leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-74Injection
CWE-89SQL Injection
Timeline
Published2 Oct 2026
Updated14 Oct 2026
First seen2 Oct 2026
Sources
CVE-2026-104053 · NVD
Track software like this
Free during beta