CVE 5.3 MEDIUM

jiujiujia/victor123/wxw850227 jjjfood/jjjshop_food index sql injection_CVE-2026-0843

5.3 / 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Description

A vulnerability has been found in jiujiujia/victor123/wxw850227 jjjfood and jjjshop_food up to 20260103. This vulnerability affects unknown code of the file /index.php/api/product.category/index. Such manipulation of the argument latitude leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product is distributed under multiple different names. The vendor was contacted early about this disclosure but did not respond in any way.

Basic Information

ID CVE-2026-0843
Source VulDB
Published Jan 11, 2026 at 09:02

Affected Product

Vendor jiujiujia
Product jjjfood
Version 20260103
Affected Versions jiujiujia jjjfood 20260103
jiujiujia jjjshop_food 20260103
victor123 jjjfood 20260103
victor123 jjjshop_food 20260103
wxw850227 jjjfood 20260103
wxw850227 jjjshop_food 20260103

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.