code-projects Simple Food Order System vulnerabilities

Latest code-projects Simple Food Order System CVEs

Newest publication first

1. CVE-2026-5019 code-projects Simple Food Order System Parameter all-orders.php sql injection

   Published 2026-03-28

   Medium·CVSS 6.9 EPSS 0.46%

   A security vulnerability has been detected in code-projects Simple Food Order System 1.0. Affected by this vulnerability is an unknown functionality of the file all-orders.php of the component Parameter Handler. The manipulation of the argument Status leads to sql injection. The...

2. CVE-2026-5018 code-projects Simple Food Order System Parameter register-router.php sql injection

   Published 2026-03-28

   Medium·CVSS 6.9 EPSS 0.35%

   A weakness has been identified in code-projects Simple Food Order System 1.0. Affected is an unknown function of the file register-router.php of the component Parameter Handler. Executing a manipulation of the argument Name can lead to sql injection. The attack can be launched re...

3. CVE-2026-5017 code-projects Simple Food Order System Parameter all-tickets.php sql injection

   Published 2026-03-28

   Medium·CVSS 6.9 EPSS 0.34%

   A security flaw has been discovered in code-projects Simple Food Order System 1.0. This impacts an unknown function of the file /all-tickets.php of the component Parameter Handler. Performing a manipulation of the argument Status results in sql injection. The attack can be initia...

4. CVE-2026-4319 code-projects Simple Food Order System add-item.php sql injection

   Published 2026-03-17

   Medium·CVSS 6.9 EPSS 0.38%

   A vulnerability was identified in code-projects Simple Food Order System 1.0. Affected by this vulnerability is an unknown functionality of the file /routers/add-item.php. Such manipulation of the argument price leads to sql injection. The attack can be launched remotely. The exp...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.