Reference page — cumulative record through Wednesday, October 7, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2026-105168

CVE-2026-105168LOW

kishor-23 food-waste-management-system Order Assignment Block admin.php sql injection

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   L   L   L    2.1   .0020    9.0     —

AFFECTED
  Product                       Versions                                    Fixed
  food-waste-management-system  411989e3ecb82895e53dca7865f72145f03d7d93 –  —

TIMELINE
  Oct 4   Reserved by VulDB
  Oct 4   Published (CNA: VulDB)
  Oct 5   RESCORED — CVE-2026-105168 (kishor-23 food-waste-management-system). CVSS 5.3 → 2.1 (NVD).

CWE-74, CWE-89 · CNA: VulDB · CVSS v4.0 · 6 references · NVD status: Deferred

Description

A vulnerability was identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This affects an unknown function of the file admin/admin.php of the component Order Assignment Block. The manipulation of the argument order_id/delivery_person_id leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.

Lifecycle

Complete event history — 3 events, chronological
Date	Event	Detail
October 4, 2026	Reserved	Reserved by VulDB
October 4, 2026	Published	Published (CNA: VulDB)
October 5, 2026	RESCORED	RESCORED — CVE-2026-105168 (kishor-23 food-waste-management-system). CVSS 5.3 → 2.1 (NVD).

Affected

Affected products and packages — 1 row
Vendor	Product / Package	Ecosystem	Version introduced	Fixed
kishor-23	food-waste-management-system	—	411989e3ecb82895e53dca7865f72145f03d7d93	—

Weaknesses

CWE-74 · CWE-89

References (6)

Authoritative record: CVE-2026-105168 at cve.org

Vendors: kishor-23

Weaknesses: CWE-74 · CWE-89

About this page

This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2026-105168 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, October 7, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.