{"id":"CVE-2026-127284","title":"SourceCodester Food Ordering System Admin Write add_category.php sql injection","summary":"A security flaw has been discovered in SourceCodester Food Ordering System 1.0. This affects an unknown part of the file admin/add_category.php of the component Admin Write Handler. Performing a manipulation of the argument title/descrip…","severity":"high","cvss":7.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C","cvssSource":"cna","cwe":["CWE-89","CWE-74"],"vendor":"SourceCodester","product":"Food Ordering System","affected":["food_ordering_system 1.0"],"published":"2026-11-13","updated":"2026-11-13","sourceUpdated":"2026-11-13T02:00:26.141Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-127284","references":[{"url":"https://vuldb.com/vuln/436450","label":"VDB-436450 | SourceCodester Food Ordering System Admin Write add_category.php sql injection"},{"url":"https://vuldb.com/vuln/436450/cti","label":"VDB-436450 | CTI Indicators (IOB, IOC, TTP, IOA)"},{"url":"https://vuldb.com/cve/CVE-2026-127284","label":"CVE-2026-127284 | CVE Analysis and Report"},{"url":"https://vuldb.com/submit/1041049","label":"Submit #1041049 | SourceCodester Food Ordering System in PHP and MySQL 1.0 SQL Injection"},{"url":"https://github.com/yuechuya/sourcecodester-vuln-reports/blob/main/reports/Food-Ordering-System/VULN-F2-Unauth-SQL-Injection.md"},{"url":"https://www.sourcecodester.com/"}],"tags":["cve.org"],"ingestedAt":"2026-11-13T02:19:56.906Z","slug":"CVE-2026-127284","body":"## Overview\n\nA security flaw has been discovered in SourceCodester Food Ordering System 1.0. This affects an unknown part of the file admin/add_category.php of the component Admin Write Handler. Performing a manipulation of the argument title/description/price/current_image/featured/active/id results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks.\n\n## Affected\n\n- `food_ordering_system 1.0`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":40,"depthScoreParts":{"impact":40.2,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}