Online Food Ordering System
Approved changes feed: RSS · Atom
cpe:2.3:a:sourcecodester:online_food_ordering_system:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sourcecodester (f6c988b2-f9bb-51b9-8f02-f23eef2a7551) |
|---|---|
| Product | Online Food Ordering System (7b5b5d01-4b71-566e-a7fa-97163a0aca81) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-90854 |
vulnerable | 2026-09-16 04:33:05.569298 |
SourceCodester/katojkalemba Online Food Ordering System category-foods.php sql injection
HIGH (7.3)
A security flaw has been discovered in SourceCodester/katojkalemba Online Food Ordering System 1.0. The impacted element is an unknown function of the file /web/category-foods.php. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.
Published: 2026-09-15T02:30:13.589Z
Updated: 2026-09-16T16:57:48.935Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-90855 |
vulnerable | 2026-09-16 04:33:05.421138 |
SourceCodester/katojkalemba Online Food Ordering System order.php sql injection
HIGH (7.3)
A weakness has been identified in SourceCodester/katojkalemba Online Food Ordering System 1.0. This affects an unknown function of the file /web/order.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.
Published: 2026-09-15T02:45:10.547Z
Updated: 2026-09-15T13:57:13.222Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-5811 |
vulnerable | 2026-06-08 08:07:04.123884 |
SourceCodester Online Food Ordering System POST Parameter Actions.php save_product logic error
MEDIUM (5.4)
A vulnerability was identified in SourceCodester Online Food Ordering System 1.0. Affected by this issue is the function save_product of the file /Actions.php of the component POST Parameter Handler. Such manipulation of the argument price leads to business logic errors. The attack may be performed from remote. The exploit is publicly available and might be used.
Published: 2026-04-08T22:15:13.008Z
Updated: 2026-04-09T13:18:59.568Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-10694 |
vulnerable | 2026-06-08 07:47:13.847332 |
SourceCodester Online Food Ordering System index.php include file inclusion
HIGH (7.3)
A vulnerability was detected in SourceCodester Online Food Ordering System 2.0. Affected by this issue is the function include of the file /index.php. The manipulation of the argument page results in file inclusion. The attack can be launched remotely. The exploit is now public and may be used.
Published: 2026-06-03T00:15:08.880Z
Updated: 2026-06-03T12:29:00.364Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2387 |
vulnerable | 2026-06-08 07:16:56.942985 |
SourceCodester Online Food Ordering System ajax.php sql injection
HIGH (7.3)
A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been classified as critical. Affected is an unknown function of the file /admin/ajax.php?action=add_to_cart. The manipulation of the argument pid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-03-17T17:31:05.462Z
Updated: 2025-03-17T18:23:27.462Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8604 |
vulnerable | 2026-06-08 07:00:25.188680 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-1432 |
vulnerable | 2026-06-08 05:52:35.910735 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0332 |
vulnerable | 2026-06-08 05:52:04.767459 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0305 |
vulnerable | 2026-06-08 05:52:04.719683 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0304 |
vulnerable | 2026-06-08 05:52:04.719220 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0303 |
vulnerable | 2026-06-08 05:52:04.717011 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0258 |
vulnerable | 2026-06-08 05:52:04.616753 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0257 |
vulnerable | 2026-06-08 05:52:04.616363 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0256 |
vulnerable | 2026-06-08 05:52:04.613735 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.