CVE-2026-81203

Name of the Vulnerable Software and Affected Versions SourceCodester Simple Online Food Ordering System version 1.0

Description An issue exists that allows remote attackers to perform SQL injection. This occurs through the manipulation of the email argument within the '/admin/ajax.php?action=login2' endpoint. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution, potentially allowing unauthorized access to the database.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Avoid using the email parameter in the '/admin/ajax.php?action=login2' endpoint until the issue is resolved.