Approved changes feed: RSS · Atom

cpe:2.3:a:code-projects:simple_food_order_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCode Projects (a64d3912-7513-5560-97cf-6216c4da48a5)
ProductSimple Food Order System (dc9b36e3-d90c-5710-aebe-cacf1bb88c64)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-5019 vulnerable 2026-06-08 08:07:02.873815 code-projects Simple Food Order System Parameter all-orders.php sql injection
HIGH (7.3)
A security vulnerability has been detected in code-projects Simple Food Order System 1.0. Affected by this vulnerability is an unknown functionality of the file all-orders.php of the component Parameter Handler. The manipulation of the argument Status leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.
Published: 2026-03-28T23:30:12.263Z
Updated: 2026-03-30T13:29:17.174Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5018 vulnerable 2026-06-08 08:07:02.873246 code-projects Simple Food Order System Parameter register-router.php sql injection
HIGH (7.3)
A weakness has been identified in code-projects Simple Food Order System 1.0. Affected is an unknown function of the file register-router.php of the component Parameter Handler. Executing a manipulation of the argument Name can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.
Published: 2026-03-28T22:30:15.700Z
Updated: 2026-03-30T15:54:42.543Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5017 vulnerable 2026-06-08 08:07:02.869687 code-projects Simple Food Order System Parameter all-tickets.php sql injection
HIGH (7.3)
A security flaw has been discovered in code-projects Simple Food Order System 1.0. This impacts an unknown function of the file /all-tickets.php of the component Parameter Handler. Performing a manipulation of the argument Status results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks.
Published: 2026-03-28T22:30:12.864Z
Updated: 2026-03-30T14:52:56.572Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-4319 vulnerable 2026-06-08 08:05:13.230470 code-projects Simple Food Order System add-item.php sql injection
HIGH (7.3)
A vulnerability was identified in code-projects Simple Food Order System 1.0. Affected by this vulnerability is an unknown functionality of the file /routers/add-item.php. Such manipulation of the argument price leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used.
Published: 2026-03-17T17:02:11.472Z
Updated: 2026-03-17T17:21:02.768Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.