code-projects Online Food Ordering System vulnerabilities

Latest code-projects Online Food Ordering System CVEs

Newest publication first

1. CVE-2026-5157 code-projects Online Food Ordering System Order order.php cross site scripting

   Published 2026-03-30

   Medium·CVSS 5.3 EPSS 0.34%

   A vulnerability was identified in code-projects Online Food Ordering System 1.0. Affected is an unknown function of the file /form/order.php of the component Order Module. Such manipulation of the argument cust_id leads to cross site scripting. The attack may be performed from re...

2. CVE-2026-4900 code-projects Online Food Ordering System localhost.sql privilege escalation

   Published 2026-03-26

   Medium·CVSS 6.9 EPSS 0.45%

   A weakness has been identified in code-projects Online Food Ordering System 1.0. This affects an unknown part of the file /dbfood/localhost.sql. This manipulation causes files or directories accessible. The attack can be initiated remotely. The exploit has been made available to...

3. CVE-2026-4899 code-projects Online Food Ordering System food.php cross site scripting

   Published 2026-03-26

   Medium·CVSS 4.8 EPSS 0.31%

   A security flaw has been discovered in code-projects Online Food Ordering System 1.0. Affected by this issue is some unknown functionality of the file /dbfood/food.php. The manipulation of the argument cuisines results in cross site scripting. It is possible to launch the attack...

4. CVE-2026-4898 code-projects Online Food Ordering System contact.php cross site scripting

   Published 2026-03-26

   Medium·CVSS 5.3 EPSS 0.36%

   A vulnerability was identified in code-projects Online Food Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file /dbfood/contact.php. The manipulation of the argument Name leads to cross site scripting. It is possible to initiate the attack...

5. CVE-2026-4844 code-projects Online Food Ordering System Admin Login admin.php sql injection

   Published 2026-03-26

   Medium·CVSS 6.9 EPSS 0.34%

   A vulnerability was detected in code-projects Online Food Ordering System 1.0. This issue affects some unknown processing of the file /admin.php of the component Admin Login Module. The manipulation of the argument Username results in sql injection. The attack may be performed fr...

6. CVE-2026-4841 code-projects Online Food Ordering System Shopping Cart cart.php sql injection

   Published 2026-03-26

   Medium·CVSS 6.9 EPSS 0.27%

   A weakness has been identified in code-projects Online Food Ordering System 1.0. This affects an unknown part of the file form/cart.php of the component Shopping Cart Module. Executing a manipulation of the argument del can lead to sql injection. The attack can be executed remote...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.