{"id":"CVE-2026-116745","aliases":[],"title":"QloApps through 1.7.0 Guest Order Disclosure via id_cart in Order Confirmation","titleSource":"VulnCheck","descriptionSource":"VulnCheck","products":[{"vendor":"qloapps","name":"qloapps","platforms":[],"versions":[{"version":"0","status":"affected","lessThanOrEqual":"1.7.0","versionType":"semver"}],"defaultStatus":"unaffected","source":"VulnCheck","url":"https://www.cve.org/CVERecord?id=CVE-2026-116745"}],"remediation":[],"description":"QloApps through 1.7.0 contains an information disclosure vulnerability in OrderConfirmationController::init() that allows unauthenticated attackers to obtain guest order references and emails by supplying guest id_cart values. Attackers can iterate sequential id_cart values, read the Location redirect header, view booking details via guest-tracking, and convert guests into accounts with attacker-chosen passwords.","severity":"medium","score":6.9,"published":"2026-10-26T21:52:43.567Z","modified":"2026-10-26T21:52:43.567Z","withdrawn":false,"knownExploited":false,"affected":[],"references":["https://github.com/Qloapps/QloApps/pull/1912","https://github.com/Qloapps/QloApps/commit/64c62aca58779c9b507d9dc2c80b216b28f55bae","https://github.com/Qloapps/QloApps","https://github.com/Qloapps/QloApps/blob/v1.7.0/controllers/front/OrderConfirmationController.php#L59-L62","https://www.vulncheck.com/advisories/qloapps-through-1.7.0-guest-order-disclosure-via-id-cart-in-order-confirmation"],"sources":[{"name":"CVE","id":"CVE-2026-116745","modified":"2026-10-26T21:52:43.567Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-116745"}],"assessments":[{"source":"VulnCheck","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","score":6.9},{"source":"VulnCheck","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","score":6.5}],"sourceAffected":[],"kev":{"status":"not-listed","checkedAt":"2026-10-29T06:00:31.558Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}