CVE-2023-24203-and-CVE-2023-24204

CVE-2023-24203-and-CVE-2023-24204 소개 끊임없이 진화하는 사이버 보안 환경에서 웹 애플리케이션은 취약점을 악용하려는 공격자의 주요 표적이 되고 있습니다. 최근 SourceCodester Simple Customer Relationship Management CRM System v1.0에서 CVE-2023-24203 및 CVE-2023-24204라는 두 가지 심각한 취약점이 발견되었습니다. XSSCross-Site Scripting와 SQL 인젝션SQL Injection과 관련된 이 취약점들은 임의 코...

CVE-2026-86294: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by this issue is some unknown functionality of the file save-settings.php of the component Settings Update Endpoint. The manipulation of the argument sitename/sitedesc leads to cross site scripting. Remot...

PT-2026-86667

A vulnerability was detected in SourceCodester Simple Traffic Offense System 1.0. Affected is an unknown function of the file saveuser.php of the component User Creation. Performing a manipulation of the argument position results in missing authentication. The attack may be initiated remotely. Th...

CVE-2026-86293: Missing Authentication for Critical Function

A flaw has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by this vulnerability is an unknown functionality of the file delete-user.php of the component Deletion Endpoint. Executing a manipulation of the argument ID can lead to missing authentication. The attack may be...

CVE-2026-86292: Missing Authentication for Critical Function

A vulnerability was detected in SourceCodester Simple Traffic Offense System 1.0. Affected is an unknown function of the file saveuser.php of the component User Creation. Performing a manipulation of the argument position results in missing authentication. The attack may be initiated remotely. Th...

CVE-2026-81203: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Simple Online Food Ordering System 1.0. This affects an unknown function of the file /admin/ajax.php?action=login2. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2026-78198: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /fos/admin/ajax.php?action=addtocart. Such manipulation of the argument pid leads to sql injection. The attack may be launched remotely. The...

CVE-2026-78199: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in SourceCodester Simple Online Food Ordering System 1.0. Impacted is an unknown function of the file /fos/viewprod.php. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and...

CVE-2026-78248: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in SourceCodester Simple Online Food Ordering System 1.0. Impacted is an unknown function of the file /fos/admin/ajax.php?action=savesettings. This manipulation of the argument Name causes sql injection. The attack is possible to be carried out remotely. The exploit...

CVE-2026-78247: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /fos/admin/ajax.php?action=confirmorder. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has be...

CVE-2026-78197: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in SourceCodester Simple Online Food Ordering System 1.0. This vulnerability affects unknown code of the file /fos/admin/ajax.php?action=saveuser. This manipulation of the argument Username causes sql injection. The attack may be initiated remotely. The exploit has...

EUVD-2026-63394

A weakness has been identified in SourceCodester Simple Online Food Ordering System 1.0. The affected element is an unknown function of the file /admin/ajax.php?action=savecategory. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The...

CVE-2026-76997 SourceCodester Simple Online Food Ordering System ajax.php save_category sql injection

A weakness has been identified in SourceCodester Simple Online Food Ordering System 1.0. The affected element is an unknown function of the file /admin/ajax.php?action=savecategory. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The...

PT-2026-79047

Name of the Vulnerable Software and Affected Versions SourceCodester Simple Online Food Ordering System version 1.0 Description A SQL injection flaw exists in the /admin/ajax.php?action=delete category endpoint. This issue occurs when the ID argument is manipulated, allowing a remote attacker to...

CVE-2026-76998: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in SourceCodester Simple Online Food Ordering System 1.0. The impacted element is an unknown function of the file /admin/ajax.php?action=deletecategory. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack...

CVE-2026-76997: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in SourceCodester Simple Online Food Ordering System 1.0. The affected element is an unknown function of the file /admin/ajax.php?action=savecategory. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The...

CVE-2026-76995: Unrestricted Upload of File with Dangerous Type

A vulnerability was identified in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /admin/ajax.php?action=savemenu. The manipulation of the argument img leads to unrestricted upload. The attack is possible to be carried out remotely. Th...

CVE-2026-76996: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in SourceCodester Simple Online Food Ordering System 1.0. Impacted is an unknown function of the file /fos/admin/vieworder.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been released ...

CVE-2026-76049

CVE-2026-76049 is a SQL injection in SourceCodester Simple Online Food Ordering System 1.0, triggered via the ID argument in /admin/ajax.php?action=save_menu, exploitable remotely with no authentication; CVSS 7.3 HIGH, exploit code maturity PoC, but no specific in-the-wild exploitation evidence i...

CVE-2026-76048

SourceCodester Simple Online Food Ordering System 1.0 contains a SQL injection vulnerability in the Username parameter of /admin/ajax.php?action=login. A remote, unauthenticated attacker can exploit this to compromise confidentiality, integrity, and availability of the application. A proof-of-con...