Lucene search
+L

16501 matches found

NVD
NVD
added 2026/08/20 4:18 p.m.7 views

CVE-2026-76998

A security vulnerability has been detected in SourceCodester Simple Online Food Ordering System 1.0. The impacted element is an unknown function of the file /admin/ajax.php?action=deletecategory. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack...

7.5CVSS0.00263EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/20 3:45 p.m.27 views

CVE-2026-76999 SourceCodester CET Automated Grading System with AI Predictive Analytics index.php add_grade improper authorization

A vulnerability was detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This affects the function addgrade of the file /index.php. Performing a manipulation of the argument studentid results in improper authorization. The attack can be initiated remotely...

6.5CVSS0.00256EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/08/20 3:45 p.m.9 views

EUVD-2026-63401

A vulnerability was detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This affects the function addgrade of the file /index.php. Performing a manipulation of the argument studentid results in improper authorization. The attack can be initiated remotely...

6.5CVSS6.3AI score0.00256EPSS
SaveExploits0References5
CVE
CVE
added 2026/08/20 3:45 p.m.10 views

CVE-2026-76999

SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0 is affected by an improper authorization vulnerability in the add_grade function of /index.php. Manipulating the student_id argument allows a remote, low-privilege attacker to bypass authorization controls, resulting in ...

6.5CVSS6.2AI score0.00256EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/08/20 3:15 p.m.10 views

EUVD-2026-63394

A weakness has been identified in SourceCodester Simple Online Food Ordering System 1.0. The affected element is an unknown function of the file /admin/ajax.php?action=savecategory. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The...

6.5CVSS6.5AI score0.002EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/20 3:15 p.m.14 views

CVE-2026-76997

CVE-2026-76997 is a SQL injection vulnerability in SourceCodester Simple Online Food Ordering System 1.0 , located in the file /admin/ajax.php?action=save_category. Manipulation of the ID parameter allows a remote, authenticated attacker to inject SQL queries. The vulnerability is rated MEDIUM se...

6.5CVSS6.5AI score0.002EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2026/08/20 3:15 p.m.6 views

CVE-2026-76997 SourceCodester Simple Online Food Ordering System ajax.php save_category sql injection

A weakness has been identified in SourceCodester Simple Online Food Ordering System 1.0. The affected element is an unknown function of the file /admin/ajax.php?action=savecategory. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The...

6.5CVSS6.5AI score0.002EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/20 3:15 p.m.26 views

CVE-2026-76997 SourceCodester Simple Online Food Ordering System ajax.php save_category sql injection

A weakness has been identified in SourceCodester Simple Online Food Ordering System 1.0. The affected element is an unknown function of the file /admin/ajax.php?action=savecategory. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The...

6.5CVSS0.002EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/20 2:45 p.m.29 views

CVE-2026-76995 SourceCodester Simple Online Food Ordering System ajax.php save_menu unrestricted upload

A vulnerability was identified in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /admin/ajax.php?action=savemenu. The manipulation of the argument img leads to unrestricted upload. The attack is possible to be carried out remotely. Th...

5.8CVSS0.00227EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/08/20 2:45 p.m.13 views

EUVD-2026-63391

A vulnerability was identified in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /admin/ajax.php?action=savemenu. The manipulation of the argument img leads to unrestricted upload. The attack is possible to be carried out remotely. Th...

5.8CVSS5AI score0.00227EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/08/20 12:00 a.m.14 views

PT-2026-79047

A security vulnerability has been detected in SourceCodester Simple Online Food Ordering System 1.0. The impacted element is an unknown function of the file /admin/ajax.php?action=delete category. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack...

7.3CVSS7.2AI score0.00263EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/08/20 12:00 a.m.15 views

PT-2026-79048

A vulnerability was detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This affects the function add grade of the file /index.php. Performing a manipulation of the argument student id results in improper authorization. The attack can be initiated remotely...

6.5CVSS6.2AI score0.00256EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/19 3:30 a.m.34 views

CVE-2026-76050 SourceCodester Simple Online Food Ordering System ajax.php delete_menu sql injection

A vulnerability was found in SourceCodester Simple Online Food Ordering System 1.0. This impacts an unknown function of the file /admin/ajax.php?action=deletemenu. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit has been made...

7.5CVSS0.00328EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/19 3:30 a.m.18 views

CVE-2026-76050

SQL injection exists in the ID argument of /admin/ajax.php?action=delete_menu in SourceCodester Simple Online Food Ordering System 1.0, exploitable remotely without authentication; a public proof-of-concept exists, so patching or replacing the vulnerable input handling is critical. No remediation...

7.5CVSS7.2AI score0.00328EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/08/19 3:15 a.m.10 views

EUVD-2026-62227

A vulnerability has been found in SourceCodester Simple Online Food Ordering System 1.0. This affects an unknown function of the file /admin/ajax.php?action=savemenu. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

7.5CVSS7.3AI score0.00328EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/19 3:15 a.m.17 views

CVE-2026-76049

CVE-2026-76049 is a SQL injection in SourceCodester Simple Online Food Ordering System 1.0, triggered via the ID argument in /admin/ajax.php?action=save_menu, exploitable remotely with no authentication; CVSS 7.3 HIGH, exploit code maturity PoC, but no specific in-the-wild exploitation evidence i...

7.5CVSS7.3AI score0.00328EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/19 3:15 a.m.36 views

CVE-2026-76049 SourceCodester Simple Online Food Ordering System ajax.php save_menu sql injection

A vulnerability has been found in SourceCodester Simple Online Food Ordering System 1.0. This affects an unknown function of the file /admin/ajax.php?action=savemenu. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

7.5CVSS0.00328EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/19 3:00 a.m.21 views

CVE-2026-76048

SourceCodester Simple Online Food Ordering System 1.0 contains a SQL injection vulnerability in the Username parameter of /admin/ajax.php?action=login. A remote, unauthenticated attacker can exploit this to compromise confidentiality, integrity, and availability of the application. A proof-of-con...

7.5CVSS7.2AI score0.00328EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/19 3:00 a.m.38 views

CVE-2026-76048 SourceCodester Simple Online Food Ordering System ajax.php login sql injection

A flaw has been found in SourceCodester Simple Online Food Ordering System 1.0. The impacted element is an unknown function of the file /admin/ajax.php?action=login. Executing a manipulation of the argument Username can lead to sql injection. The attack may be performed from remote. The exploit h...

7.5CVSS0.00328EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/08/19 12:00 a.m.12 views

PT-2026-78266

A vulnerability was found in SourceCodester Simple Online Food Ordering System 1.0. This impacts an unknown function of the file /admin/ajax.php?action=delete menu. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit has been mad...

7.5CVSS7.2AI score0.00328EPSS
SaveExploits0References7
Rows per page
Query Builder