MEDIUM
code-projects Simple Food Order System Parameter all-tickets.php sql injection
Published Mar 28, 2026
6.9
MEDIUMCVSS 4.0
EPSS 0.57%
Description
A security flaw has been discovered in code-projects Simple Food Order System 1.0. This impacts an unknown function of the file /all-tickets.php of the component Parameter Handler. Performing a manipulation of the argument Status results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks.
Affected products
-
- Version 1.0StatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Code-Projects | Simple Food Order System | n/a |
|
- 1.0
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (2)
References (6)
- https://code-projects.org/ product
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-16953 Advisory
- https://github.com/6Justdododo6/CVE/issues/15 exploitissue-trackingIssue TrackingMitigationThird Party Advisory
- https://vuldb.com/submit/779331 third-party-advisoryThird Party AdvisoryVDB Entry
- https://vuldb.com/vuln/353902 vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
- https://vuldb.com/vuln/353902/cti signaturepermissions-requiredPermissions RequiredVDB Entry
| Link | Providers | Tags |
|---|---|---|
| https://code-projects.org/ | product | |
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-16953 | Advisory | |
| https://github.com/6Justdododo6/CVE/issues/15 | exploitissue-trackingIssue TrackingMitigationThird Party Advisory | |
| https://vuldb.com/submit/779331 | third-party-advisoryThird Party AdvisoryVDB Entry | |
| https://vuldb.com/vuln/353902 | vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry | |
| https://vuldb.com/vuln/353902/cti | signaturepermissions-requiredPermissions RequiredVDB Entry |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner VulDB
Published Mar 28, 2026
Updated Mar 30, 2026
Reserved Mar 27, 2026
Link CVE-2026-5017
CISA Vulnrichment
Updated Mar 30, 2026
ENISA EUVD
EUVD-2026-16953 Assigner VulDB
Published Mar 28, 2026
Updated Mar 30, 2026
Exploited since n/a
Link EUVD-2026-16953