CVE-2026-116605Medium· 5.3▾ SunlitA vulnerability was found in SourceCodester Online Food Ordering System 1.0. The impacted element is an unknown function of the file order.php. The manipulation of the argument price/title results in client-side enforcement of server-sid…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 29.2 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 27.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.3%
A vulnerability was found in SourceCodester Online Food Ordering System 1.0. The impacted element is an unknown function of the file order.php. The manipulation of the argument price/title results in client-side enforcement of server-side security. It is possible to launch the attack remotely. The exploit has been made public and could be used.
online_food_ordering_system 1.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-116604Medium· 6.5SourceCodester Online Food Ordering System delete_admin.php missing authentication
CVE-2026-116603Medium· 4.7SourceCodester Online Food Ordering System add_food.php unrestricted upload
CVE-2026-116602Medium· 6.5SourceCodester Online Food Ordering System delete.php unlink path traversal
CVE-2026-92385Low· 2.4A vulnerability has been found in SourceCodester Online Food Ordering System 1.0
CVE-2026-116055Medium· 6.3SourceCodester Performance Indicator System deleteproduct.php sql injection
CVE-2026-116060High· 7.3SourceCodester Performance Indicator System adddealer.php sql injection