Lucene search
+L

5 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/02 12:00 a.m.•0 views

CVE-2026-26711: Improper Neutralization of Special Elements used in an SQL Command

code-projects Simple Food Order System v1.0 is vulnerable to SQL Injection in /food/view-ticket.php...

9.8CVSS5.8AI score0.005EPSS
SaveExploits1References1
NVD
NVD
•added 2026/02/08 6:16 a.m.•21 views

CVE-2026-2136

A flaw has been found in projectworlds Online Food Ordering System 1.0. This affects an unknown function of the file /view-ticket.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be use...

9.8CVSS0.00339EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/08 12:00 a.m.•1 views

CVE-2026-2136: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in projectworlds Online Food Ordering System 1.0. This affects an unknown function of the file /view-ticket.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be use...

9.8CVSS7AI score0.00339EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/10 12:00 a.m.•0 views

CVE-2025-12930: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Food Ordering System 1.0. Affected is an unknown function of the file /view-ticket.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may...

9.8CVSS5.5AI score0.00323EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/11/10 12:00 a.m.•27 views

PT-2025-45597

A vulnerability has been found in SourceCodester Food Ordering System 1.0. Affected is an unknown function of the file /view-ticket.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may...

6.5CVSS7.2AI score0.00323EPSS
SaveExploits1References6
Rows per page
Query Builder