CVE-2026-76049

HighCVSS 7.3

Published: 19/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.33%

26th percentile - higher than 26% of all known CVEs

Summary

A vulnerability has been found in SourceCodester Simple Online Food Ordering System 1.0, affecting an unknown function in /admin/ajax.php?action=save_menu. Manipulation of ID leads to SQL injection. Remote attack is possible and exploit is public.

Risk Assessment

SQL injection could allow unauthorized access to the database, potentially leading to data leakage or modification.

Recommendation

Update the system to a patched version and use parameterized queries.

Original NVD description (English source)

A vulnerability has been found in SourceCodester Simple Online Food Ordering System 1.0. This affects an unknown function of the file /admin/ajax.php?action=save_menu. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.