4 matches found
CVE-2026-4319: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in code-projects Simple Food Order System 1.0. Affected by this vulnerability is an unknown functionality of the file /routers/add-item.php. Such manipulation of the argument price leads to sql injection. The attack can be launched remotely. The exploit is publicly...
PT-2026-25911
Name of the Vulnerable Software and Affected Versions code-projects Simple Food Order System version 1.0 Description A flaw exists in code-projects Simple Food Order System 1.0 that allows for SQL injection. This issue is located in an unknown functionality within the /routers/add-item.php file...
CVE-2025-4507: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in Campcodes Online Food Ordering System 1.0. This affects an unknown part of the file /routers/add-item.php. The manipulation of the argument price leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
CVE-2023-45323: Improper Neutralization of Special Elements used in an SQL Command
Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'name' parameter of the routers/add-item.php resource does not validate the characters received and they are sent unfiltered to the database...