EUVD-2026-110537

A flaw has been found in SourceCodester Online Food Ordering System 1.0. Impacted is an unknown function of the file admin/addfood.php. Executing a manipulation of the argument image can lead to unrestricted upload. The attack may be performed from remote. The exploit has been published and may b...

CVE-2026-116603

The SourceCodester Online Food Ordering System 1.0 is vulnerable to an unrestricted upload flaw in an unknown function of the admin/add_food.php file. A remote attacker can manipulate the image argument to upload files without proper restrictions. This vulnerability is associated with CWE-434 (Un...