High severity7.3NVD Advisory· Published Sep 3, 2026

CVE-2026-85187

Description

A security vulnerability has been detected in itsourcecode Online Medicine Delivery System 1.0. Affected by this issue is the function Order::pupdate of the file /rider/orders/controller.php?action=edit&actions=confirm of the component Order Status Update. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Itsourcecode/Online Medicine Delivery Systemllm-fuzzy
Range: = 1.0

Patches

Vulnerability mechanics

References

github.com/boyslikesports/202607_vul_dir/blob/main/C-12-SQLi-Rider-Order-MultiPoint_en.mdnvd
itsourcecode.comnvd
vuldb.com/cve/CVE-2026-85187nvd
vuldb.com/submit/892987nvd
vuldb.com/vuln/398400nvd
vuldb.com/vuln/398400/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.474
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000