GHSA-8f79-w7h9-x6c8MediumCVSS 7.3
A security flaw has been discovered in SourceCodester Food Ordering System 1.0. This affects an...
🔗 CVE IDs covered (1)
📋 Description
A security flaw has been discovered in SourceCodester Food Ordering System 1.0. This affects an unknown part of the file admin/add_category.php of the component Admin Write Handler. Performing a manipulation of the argument title/description/price/current_image/featured/active/id results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks.
🔗 References (8)
- https://nvd.nist.gov/vuln/detail/CVE-2026-127284
- https://github.com/yuechuya/sourcecodester-vuln-reports/blob/main/reports/Food-Ordering-System/VULN-F2-Unauth-SQL-Injection.md
- https://vuldb.com/cve/CVE-2026-127284
- https://vuldb.com/submit/1041049
- https://vuldb.com/vuln/436450
- https://vuldb.com/vuln/436450/cti
- https://www.sourcecodester.com
- https://github.com/advisories/GHSA-8f79-w7h9-x6c8