CVE-2026-4839

creationtimestamp| type| source ---|---|--- 2026-03-26 06:38:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhwykk52b62i...

CVE-2026-4839

SourceCodester Food Ordering System 1.0 contains a SQL injection in the Parameter Handler within /purchase.php, triggered by manipulating the custom parameter. Affected component: unknown function in /purchase.php; root cause is improper handling of the custom argument leading to SQL injection. T...