Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-78247

SourceCodester Simple Online Food Ordering System ajax.php confirm_order sql injection

Description

A vulnerability was found in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /fos/admin/ajax.php?action=confirm_order. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SourceCodester Simple Online Food Ordering System

  • 1.0affected

References