CVE-2026-103230

Name of the Vulnerable Software and Affected Versions AdithyaYelloju Restaurant-Management-System versions prior to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c

Description An issue exists in the Order Placement component within the mysqli query() function of the User/ord.php file. A remote attacker can perform SQL injection, which is a technique used to manipulate database queries, by manipulating the id or name arguments.

Recommendations As a temporary workaround, restrict access to the User/ord.php file or avoid using the id and name parameters in the Order Placement component until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.