Vulnerabilidades do SourceCodester Online Food Ordering System
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam SourceCodester Online Food Ordering System: 2 registro(s), com versões afetadas e correções.
CVE-2026-10694
Alta · 7.3
CWE-73 02/06/2026
SourceCodester Online Food Ordering System index.php include file inclusion
A vulnerability was detected in SourceCodester Online Food Ordering System 2.0. Affected by this issue is the function include of the file /index.php. The manipulation of the argument page results in file inclusion. The attack can be launched remotely. The exploit is now public and may be used.
CVE-2026-5811
Média · 5.4
CWE-840 08/04/2026
SourceCodester Online Food Ordering System POST Parameter Actions.php save_product logic error
A vulnerability was identified in SourceCodester Online Food Ordering System 1.0. Affected by this issue is the function save_product of the file /Actions.php of the component POST Parameter Handler. Such manipulation of the argument price leads to business logic errors. The attack may be performed from remote. The exploit is publicly available and might be used.