Cpe:2.3:a:sourcecodester:food_ordering_system_1_0:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3asourcecodesterfood_ordering_system_1_0/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioFri, 13 Nov 2026 04:58:06 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgSourceCodester Food Ordering System SQL Injection (CVE-2026-127284)https://feed.craftedsignal.io/briefs/2026-11-food-ordering-sql-injection-cve-2026-127284/Fri, 13 Nov 2026 04:58:06 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-food-ordering-sql-injection-cve-2026-127284/SourceCodester Food Ordering System 1.0 is vulnerable to remote SQL injection via the admin/add_category.php component.SourceCodester Food Ordering System 1.0 contains a SQL injection vulnerability within the Admin Write Handler component. Remote attackers can manipulate the title, description, price, current_image, featured, active, or id arguments within the admin/add_category.php file to execute SQL commands.

Impact

Successful exploitation allows remote attackers to execute arbitrary SQL commands against the backend database. The vulnerability has a CVSS v3.1 base score of 7.3.

Recommendation

Administrators should monitor web logs for suspicious activity targeting the affected file.

]]>highadvisorySourceCodester Food Ordering System: Unrestricted File Upload (CVE-2026-127283)https://feed.craftedsignal.io/briefs/2026-11-food-ordering-system-rce-cve-2026-127283/Fri, 13 Nov 2026 02:45:39 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-food-ordering-system-rce-cve-2026-127283/SourceCodester Food Ordering System 1.0 contains an unrestricted file upload vulnerability in the admin/update_food.php file.<p>SourceCodester Food Ordering System 1.0 is vulnerable to an unrestricted file upload via the 'cmd' argument in the 'admin/update_food.php' script of the Admin Image Handler component. This vulnerability is remotely exploitable and a public exploit is available.</p> highadvisory