{"id":"CVE-2026-116605","title":"SourceCodester Online Food Ordering System order.php client-side enforcement of server-side security","summary":"A vulnerability was found in SourceCodester Online Food Ordering System 1.0. The impacted element is an unknown function of the file order.php. The manipulation of the argument price/title results in client-side enforcement of server-sid…","severity":"medium","cvss":5.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R","cvssSource":"cna","cwe":["CWE-602"],"vendor":"SourceCodester","product":"Online Food Ordering System","affected":["online_food_ordering_system 1.0"],"published":"2026-10-27","updated":"2026-10-27","sourceUpdated":"2026-10-27T00:00:20.582Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-116605","references":[{"url":"https://vuldb.com/vuln/426511","label":"VDB-426511 | SourceCodester Online Food Ordering System order.php client-side enforcement of server-side security"},{"url":"https://vuldb.com/vuln/426511/cti","label":"VDB-426511 | CTI Indicators (IOB, IOC, IOA)"},{"url":"https://vuldb.com/cve/CVE-2026-116605","label":"CVE-2026-116605 | CVE Analysis and Report"},{"url":"https://vuldb.com/submit/1022965","label":"Submit #1022965 | SourceCodester Online Food Ordering System in PHP and MySQL Source Code 1.0 Amount Tampering via Hidden Form Fields"},{"url":"https://github.com/CyberShailendra/SourceCodesterOrderPrice-AmountTamperingviaHiddenFormFields"},{"url":"https://www.sourcecodester.com/"}],"tags":["cve.org"],"epss":0.00301,"epssPercentile":0.22715,"ingestedAt":"2026-10-27T16:11:59.167Z","slug":"CVE-2026-116605","body":"## Overview\n\nA vulnerability was found in SourceCodester Online Food Ordering System 1.0. The impacted element is an unknown function of the file order.php. The manipulation of the argument price/title results in client-side enforcement of server-side security. It is possible to launch the attack remotely. The exploit has been made public and could be used.\n\n## Affected\n\n- `online_food_ordering_system 1.0`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":29,"depthScoreParts":{"impact":29.2,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}