CVE-2026-4014 - Vulnerability Analysis

Overview

itsourcecode Cafe Reservation System 1.0 contains a sql injection caused by manipulation of the "Username" argument in /curvus2/signup.php Registration component, letting remote attackers execute arbitrary SQL commands, exploit requires crafted input.

Severity & Score

Impact

Remote attackers can execute arbitrary SQL commands, potentially leading to data theft or modification.

Mitigation

Update to the latest version.

References

• https://vuldb.com/?id.350536
• https://vuldb.com/?submit.769789
• https://github.com/wangchaoxing/CVE/issues/5
• https://itsourcecode.com/
• https://vuldb.com/?ctiid.350536

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner