Projectworlds Online Food Ordering System vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Projectworlds Online Food Ordering System: 2 record(s), with affected versions and fixes.cpe:2.3:a:projectworlds:online_food_ordering_system
CVE-2026-2136
Critical · 9.8
CWE-89 Feb 8, 2026
Projectworlds Online Food Ordering System 1.0: SQL Injection in view-ticket.php
A flaw has been found in projectworlds Online Food Ordering System 1.0. This affects an unknown function of the file /view-ticket.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used.
CVE-2025-11604
Critical · 9.8
CWE-89 Oct 11, 2025
projectworlds Online Ordering Food System all-orders.php sql injection
A vulnerability was determined in projectworlds Online Ordering Food System 1.0. This issue affects some unknown processing of the file /all-orders.php. This manipulation of the argument Status causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.