Online Food Order System vulnerabilities
3 known CVE vulnerabilities in Online Food Order System, translated and rated.
- CVE-2026-19917Medium
A flaw has been found in code-projects Online Food Order System 1.0. An unknown function of the file delete_food_items1.php is affected. Manipulation of the argument checkbox leads to SQL injection. The attack can be executed remotely. The exploit has been published and may be used.
- CVE-2026-19916Low
A vulnerability was detected in the Online Food Order System 1.0 by code-projects. It affects an unknown function in the file edit_food_items.php. Manipulation of the argument dname leads to cross-site scripting. The attack can be performed remotely, and the exploit is publicly available.
- CVE-2026-15135High
A SQL injection vulnerability has been discovered in code-projects Online Food Order System 1.0 in the /edit_food_items.php file. Remote manipulation of the update argument allows SQL injection. The exploit has been publicly released.