{"id":"CVE-2026-116602","title":"SourceCodester Online Food Ordering System delete.php unlink path traversal","summary":"A vulnerability was detected in SourceCodester Online Food Ordering System 1.0. This issue affects the function unlink of the file admin/delete.php. Performing a manipulation of the argument image_name results in path traversal. The atta…","severity":"medium","cvss":6.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:R","cvssSource":"cna","cwe":["CWE-22"],"vendor":"SourceCodester","product":"Online Food Ordering System","affected":["online_food_ordering_system 1.0"],"published":"2026-10-26","updated":"2026-10-26","sourceUpdated":"2026-10-26T23:00:08.972Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-116602","references":[{"url":"https://vuldb.com/vuln/426508","label":"VDB-426508 | SourceCodester Online Food Ordering System delete.php unlink path traversal"},{"url":"https://vuldb.com/vuln/426508/cti","label":"VDB-426508 | CTI Indicators (IOB, IOC, TTP, IOA)"},{"url":"https://vuldb.com/cve/CVE-2026-116602","label":"CVE-2026-116602 | CVE Analysis and Report"},{"url":"https://vuldb.com/submit/1022943","label":"Submit #1022943 | SourceCodester Online Food Ordering System in PHP and MySQL Source Code 1.0 File Deletion via Path Traversal"},{"url":"https://github.com/CyberShailendra/sourcecodesterArbitraryFileDeletion-via-PathTraversal"},{"url":"https://www.sourcecodester.com/"}],"tags":["cve.org"],"epss":0.00469,"epssPercentile":0.40415,"ingestedAt":"2026-10-27T16:11:59.138Z","slug":"CVE-2026-116602","body":"## Overview\n\nA vulnerability was detected in SourceCodester Online Food Ordering System 1.0. This issue affects the function unlink of the file admin/delete.php. Performing a manipulation of the argument image_name results in path traversal. The attack is possible to be carried out remotely. The exploit is now public and may be used.\n\n## Affected\n\n- `online_food_ordering_system 1.0`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":36,"depthScoreParts":{"impact":35.8,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}