cve-disclosures

CVE Disclosures — Aman Bahiniya Three CVEs assigned by MITRE in December 2024. The records were reserved but never published, so nothing is indexed yet. This repo publishes the advisories so the CVEs become searchable and credited. CVE| Product| Type ---|---|--- CVE-2024-57551| Online Food Orderi...

CVE-2026-116605

A vulnerability was found in SourceCodester Online Food Ordering System 1.0. The impacted element is an unknown function of the file order.php. The manipulation of the argument price/title results in client-side enforcement of server-side security. It is possible to launch the attack remotely. Th...

EUVD-2026-110507

A vulnerability was detected in SourceCodester Online Food Ordering System 1.0. This issue affects the function unlink of the file admin/delete.php. Performing a manipulation of the argument imagename results in path traversal. The attack is possible to be carried out remotely. The exploit is now...

EUVD-2026-110538

A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected element is an unknown function of the file admin/deleteadmin.php. The manipulation of the argument ID leads to missing authentication. It is possible to initiate the attack remotely. The exploit has bee...

EUVD-2026-110537

A flaw has been found in SourceCodester Online Food Ordering System 1.0. Impacted is an unknown function of the file admin/addfood.php. Executing a manipulation of the argument image can lead to unrestricted upload. The attack may be performed from remote. The exploit has been published and may b...

CVE-2026-116603

A flaw has been found in SourceCodester Online Food Ordering System 1.0. Impacted is an unknown function of the file admin/addfood.php. Executing a manipulation of the argument image can lead to unrestricted upload. The attack may be performed from remote. The exploit has been published and may b...

CVE-2026-116604

A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected element is an unknown function of the file admin/deleteadmin.php. The manipulation of the argument ID leads to missing authentication. It is possible to initiate the attack remotely. The exploit has bee...

CVE-2026-116605 SourceCodester Online Food Ordering System order.php client-side enforcement of server-side security

A vulnerability was found in SourceCodester Online Food Ordering System 1.0. The impacted element is an unknown function of the file order.php. The manipulation of the argument price/title results in client-side enforcement of server-side security. It is possible to launch the attack remotely. Th...

CVE-2026-116605

A vulnerability exists in the SourceCodester Online Food Ordering System 1.0 within an unknown function of the order.php file. The root cause is client-side enforcement of server-side security (CWE-602), where manipulating the price/title arguments allows for unauthorized actions. This vulnerabil...

EUVD-2026-110565

A vulnerability was found in SourceCodester Online Food Ordering System 1.0. The impacted element is an unknown function of the file order.php. The manipulation of the argument price/title results in client-side enforcement of server-side security. It is possible to launch the attack remotely. Th...

CVE-2026-116605 SourceCodester Online Food Ordering System order.php client-side enforcement of server-side security

A vulnerability was found in SourceCodester Online Food Ordering System 1.0. The impacted element is an unknown function of the file order.php. The manipulation of the argument price/title results in client-side enforcement of server-side security. It is possible to launch the attack remotely. Th...

SourceCodester Online Food Ordering System authorization issue vulnerability

The SourceCodester Online Food Ordering System version 1.0 contains an authorization issue vulnerability. This vulnerability stems from improper handling of the ID parameter in the admin/deleteadmin.php file, resulting in a lack of authentication...

SourceCodester Online Food Ordering System processing logic error vulnerability

The SourceCodester Online Food Ordering System version 1.0 contains a logic error vulnerability stemming from improper handling of the price and title parameters in the order.php file. This flaw may allow clients to enforce server-side security policies remotely, enabling attackers to exploit it...

PT-2026-125537

A vulnerability was found in SourceCodester Online Food Ordering System 1.0. The impacted element is an unknown function of the file order.php. The manipulation of the argument price/title results in client-side enforcement of server-side security. It is possible to launch the attack remotely. Th...

SourceCodester Online Food Ordering System permission and access control issue vulnerability

The SourceCodester Online Food Ordering System version 1.0 contains a security vulnerability stemming from improper handling of the “image” parameter in the admin/addfood.php file. This flaw may allow unrestricted file uploads, enabling attackers to remotely upload malicious files...

CVE-2026-116604 SourceCodester Online Food Ordering System delete_admin.php missing authentication

A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected element is an unknown function of the file admin/deleteadmin.php. The manipulation of the argument ID leads to missing authentication. It is possible to initiate the attack remotely. The exploit has bee...

CVE-2026-116604 SourceCodester Online Food Ordering System delete_admin.php missing authentication

A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected element is an unknown function of the file admin/deleteadmin.php. The manipulation of the argument ID leads to missing authentication. It is possible to initiate the attack remotely. The exploit has bee...

CVE-2026-116604

The SourceCodester Online Food Ordering System 1.0 is vulnerable to a missing authentication flaw in the admin/delete_admin.php file. By manipulating the ID argument , an unauthenticated attacker can perform administrative actions remotely. Public exploits for this vulnerability are available. No...

CVE-2026-116603

The SourceCodester Online Food Ordering System 1.0 is vulnerable to an unrestricted upload flaw in an unknown function of the admin/add_food.php file. A remote attacker can manipulate the image argument to upload files without proper restrictions. This vulnerability is associated with CWE-434 (Un...

CVE-2026-116603 SourceCodester Online Food Ordering System add_food.php unrestricted upload

A flaw has been found in SourceCodester Online Food Ordering System 1.0. Impacted is an unknown function of the file admin/addfood.php. Executing a manipulation of the argument image can lead to unrestricted upload. The attack may be performed from remote. The exploit has been published and may b...