A vulnerability, which was classified as critical, has been found in itsourcecode Agri-Trading Online Shopping System 1.0. This impacts an unknown function of the file admin/productcontroller.php of the component HTTP POST Request Handler. Performing a manipulation of the argument Product results in sql injection.
This vulnerability was named CVE-2026-2865. The attack may be initiated remotely. In addition, an exploit is available.
