SQL Injection Vulnerability in Online Food Ordering System

A critical SQL injection vulnerability has been identified in the SourceCodester Online Food Ordering System version 1.0. The vulnerability exists within the /web/category-foods.php file, where the ID argument is insufficiently sanitized before being used in database queries. An attacker can leverage this flaw to perform remote SQL injection, potentially leading to unauthorized data exfiltration, modification, or deletion within the underlying database. The vulnerability has been confirmed with a CVSS v3.1 base score of 7.3, and public exploit code is available, increasing the risk of exploitation by opportunistic threat actors.

Impact

Successful exploitation of this vulnerability allows unauthenticated remote attackers to compromise the integrity and confidentiality of the application database. In an Online Food Ordering System, this could lead to the exposure of customer personal information, order history, and potentially administrative credentials, posing a significant risk to the privacy of users and the operational security of the host organization.

Recommendation

Detection engineering teams should monitor web server logs for suspicious patterns in URI queries associated with the affected file to identify and block exploitation attempts.

• Implement monitoring for the /web/category-foods.php endpoint to detect common SQL injection syntax in the ID parameter.
• Patch or isolate instances of Online Food Ordering System 1.0, as no official vendor patch is currently available; consider moving the application behind a Web Application Firewall (WAF) with SQL injection protection rules enabled.