CVE-2026-4844 - code-projects Online Food Ordering System Admin Login admin.php sql injection

Back Back to CVE browser

MEDIUM

code-projects Online Food Ordering System Admin Login admin.php sql injection

Published Mar 26, 2026

6.9

MEDIUM

CVSS 4.0

EPSS 0.41%

Description

A vulnerability was detected in code-projects Online Food Ordering System 1.0. This issue affects some unknown processing of the file /admin.php of the component Admin Login Module. The manipulation of the argument Username results in sql injection. The attack may be performed from remote. The exploit is now public and may be used.

Affected products

Vendor Code-Projects Product Online Food Ordering System Default
n/a
- Version
  1.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Code-Projects

Online Food Ordering System

n/a

Version	Status	Constraints
1.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-74

CWE-89

SQL Injection

References (6)

https://code-projects.org/
product
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-16114
Advisory
https://gist.github.com/HxH404/8e5bd42c0f968a92a23edc5e7b879955
exploit
https://vuldb.com/?ctiid.353149
signaturepermissions-required
https://vuldb.com/?id.353149
vdb-entrytechnical-description
https://vuldb.com/?submit.776137
third-party-advisory

Link	Providers	Tags
https://code-projects.org/		product
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-16114		Advisory
https://gist.github.com/HxH404/8e5bd42c0f968a92a23edc5e7b879955		exploit
https://vuldb.com/?ctiid.353149		signaturepermissions-required
https://vuldb.com/?id.353149		vdb-entrytechnical-description
https://vuldb.com/?submit.776137		third-party-advisory