CVE-2026-76049

creationtimestamp| type| source ---|---|--- 2026-08-19 06:56:28+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mtg5nk76ih2n 2026-08-19 12:07:03+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117122087141785228 2026-08-19 12:07:04+00:00| seen|...

CVE-2026-76049

CVE-2026-76049 is a SQL injection in SourceCodester Simple Online Food Ordering System 1.0, triggered via the ID argument in /admin/ajax.php?action=save_menu, exploitable remotely with no authentication; CVSS 7.3 HIGH, exploit code maturity PoC, but no specific in-the-wild exploitation evidence i...

CVE-2026-76049 SourceCodester Simple Online Food Ordering System ajax.php save_menu sql injection

A vulnerability has been found in SourceCodester Simple Online Food Ordering System 1.0. This affects an unknown function of the file /admin/ajax.php?action=savemenu. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...