CVE-2026-79804 - SililaWijesinghe Food Ordering System search.php sql injection

Back Back to CVE browser

MEDIUM

SililaWijesinghe Food Ordering System search.php sql injection

Published Aug 25, 2026

6.9

MEDIUM

CVSS 4.0

EPSS 0.41%

Description

A vulnerability was found in SililaWijesinghe Food Ordering System up to ba314e897e3365600461e5ea59432e39ceaa0fa5. Affected by this issue is some unknown functionality of the file /search.php. Performing a manipulation of the argument search_box results in sql injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

Vendor SililaWijesinghe Product Food Ordering System Default
n/a
- Version
  
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

SililaWijesinghe

Food Ordering System

n/a

Version	Status	Constraints
	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-74

CWE-89

SQL Injection

References (5)

https://github.com/niaoniaollll/cve/issues/2
exploitissue-tracking
https://vuldb.com/cve/CVE-2026-79804
third-party-advisory
https://vuldb.com/submit/876592
third-party-advisory
https://vuldb.com/vuln/395056
vdb-entrytechnical-description
https://vuldb.com/vuln/395056/cti
signaturepermissions-required

Link	Providers	Tags
https://github.com/niaoniaollll/cve/issues/2		exploitissue-tracking
https://vuldb.com/cve/CVE-2026-79804		third-party-advisory
https://vuldb.com/submit/876592		third-party-advisory
https://vuldb.com/vuln/395056		vdb-entrytechnical-description
https://vuldb.com/vuln/395056/cti		signaturepermissions-required