CVE detail
CVE-2026-2865
A vulnerability was found in itsourcecode Agri-Trading Online Shopping System 1.0. This impacts an unknown function of the file admin/productcontroller.php of the component HTTP POST Request Handler. Performing a manipulation of the argument Product results in sql injection. The attack may be initiated remotely. The exploit has been made public and could be used.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 17.9 · diversity 11.5 · KEV 0.0 · OTX 0.0 · PoC 4.5
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
5 source links · newest first
- https://vuldb.com/?submit.754556vuldb.com
No excerpt available.
Exploitvuldb.comFeb 21, 2026, 8:16 AM - https://vuldb.com/?id.347104vuldb.com
No excerpt available.
Exploitvuldb.comFeb 21, 2026, 8:16 AM - https://vuldb.com/?ctiid.347104vuldb.com
No excerpt available.
Exploitvuldb.comFeb 21, 2026, 8:16 AM - https://itsourcecode.com/itsourcecode.com
No excerpt available.
Permissions Requireditsourcecode.comFeb 21, 2026, 8:16 AM - https://github.com/wan1yan/cve/issues/3github.com
No excerpt available.
Exploitgithub.comFeb 21, 2026, 8:16 AM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
1 repository references · best confidence 0.90 · max 0 stars
- wan1yan/cveHigh confidencegithubNVD Exploit reference0 starsDiscovered Jul 11, 2026, 3:20 AM
NVD labels the source link as Exploit; this is not independent verification of the repository's code.
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2025-7193CVSS 5.5 · Medium
A vulnerability was found in itsourcecode Agri-Trading Online Shopping System up to 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/sup…
- CVE-2025-6489CVSS 5.5 · Medium
A vulnerability has been found in itsourcecode Agri-Trading Online Shopping System 1.0 and classified as critical. This vulnerability affects unknown code of the file /transaction…
- CVE-2026-16490CVSS 2.1 · Low
A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Impacted is an unknown function of the file /prescription.php. The manipulation of the argument…
- CVE-2026-16484CVSS 5.5 · Medium
A flaw has been found in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /edit_subjecta.php. This mani…
- CVE-2026-16449CVSS 2.1 · Low
A vulnerability was determined in zsadmin2025 ZS-Admin up to b52e14536d59fda11e56e2536a1c32e82a38cead. The impacted element is the function OrderItem.asc/OrderItem.desc of the fil…
- CVE-2026-16334CVSS 2.1 · Low
A vulnerability was identified in itsourcecode Hospital Management System 1.0. This vulnerability affects unknown code of the file /prescriptionorder.php. Such manipulation of the…