Skip to content
Threat Feed
Subscribe

Product

Online Food Order System 1.0

1 brief RSS
high threat

CVE-2026-15135 - SQL Injection in code-projects Online Food Order System

A high-severity SQL injection vulnerability, CVE-2026-15135, exists in code-projects Online Food Order System 1.0 affecting the `/edit_food_items.php` file's 'update' argument, allowing remote attackers to perform unauthorized data disclosure or manipulation, with a public exploit available.

exploited Online Food Order System 1.0 web-exploitation sql-injection cve data-exfiltration data-manipulation
1r 3t 1c 7i