Oretnom23 Online Food Ordering System vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Oretnom23 Online Food Ordering System: 7 record(s), with affected versions and fixes.cpe:2.3:a:oretnom23:online_food_ordering_system
CVE-2026-30534
High · 8.3
CWE-89 Mar 27, 2026
SQL Injection in Oretnom23 Online Food Ordering System
A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in admin/manage_category.php via the "id" parameter.
CVE-2026-30533
Critical · 9.8
CWE-89 Mar 27, 2026
SQL Injection in Oretnom23 Online Food Ordering System
A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the admin/manage_product.php file via the "id" parameter.
CVE-2026-30532
Critical · 9.8
CWE-89 Mar 27, 2026
SQL Injection in Oretnom23 Online Food Ordering System
A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the admin/view_product.php file via the "id" parameter.
CVE-2026-30531
High · 8.8
CWE-89 Mar 27, 2026
SQL Injection in Oretnom23 Online Food Ordering System
A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Actions.php file (specifically the save_category action). The application fails to properly sanitize user input supplied to the "name" parameter. This allows an authenticated attacker to inject malicious SQL commands.
CVE-2026-30530
Critical · 9.8
CWE-89 Mar 27, 2026
SQL Injection in Oretnom23 Online Food Ordering System
A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Actions.php file (specifically the save_customer action). The application fails to properly sanitize user input supplied to the "username" parameter. This allows an attacker to inject malicious SQL commands.
CVE-2026-30529
High · 8.8
CWE-89 Mar 27, 2026
SQL Injection in Oretnom23 Online Food Ordering System
A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Actions.php file (specifically the save_user action). The application fails to properly sanitize user input supplied to the "username" parameter. This allows an authenticated attacker to inject malicious SQL commands.
CVE-2026-30527
Medium · 5.4
CWE-79 Mar 27, 2026
Cross-site Scripting (XSS) in Oretnom23 Online Food Ordering System
A Stored Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Category management module within the admin panel. The application fails to properly sanitize user input supplied to the "Category Name" field when creating or updating a category. When an administrator or user visits the Category list page (or any page where this category is rendered), the injected JavaScript executes immediately in their browser.