PT-2026-79828

CVE-2026-78199

Published

2026-08-24

Updated

2026-08-24

Description by

CVSS 2.0

7.5

High

MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SourceCodester Simple Online Food Ordering System version 1.0

Description An issue exists in the /fos/view prod.php file where manipulating the ID argument allows for SQL injection, a technique used to interfere with the queries that an application makes to its database. This allows for remote exploitation.

Recommendations Update SourceCodester Simple Online Food Ordering System version 1.0 to a version that contains a fix for this issue. As a temporary workaround, restrict access to the /fos/view prod.php file to minimize the risk of exploitation.

Exploitability

Exploit

Fix

Impacts

Researchers

W5555

Vendors

Affected products

Weakness enumeration

CWE-89: Improper Neutralization of Special Elements used in an SQL Command (\'SQL Injection\')

CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component (\'Injection\')

Related identifiers