Cpe:2.3:a:sourcecodester:food_ordering_system_1_0:*:*:*:*:*:*:*:*

SourceCodester Food Ordering System 1.0 is vulnerable to remote SQL injection via the admin/add_category.php component.

SourceCodester Food Ordering System 1.0 contains an unrestricted file upload vulnerability in the admin/update_food.php file.