Cpe:2.3:a:sourcecodester:online_food_ordering_system:1.0:*:*:*:*:*:*:*

Online Food Ordering System 1.0 contains a SQL injection vulnerability in /web/category-foods.php that allows remote, unauthenticated attackers to execute arbitrary database queries via the ID argument.