CVE-2026-76997: medium-severity vulnerability in SourceCodester Simple Online Food Ordering…
SourceCodester Simple Online Food Ordering System ajax.php save_category sql injection
Published · Updated
33Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 5.3epss 0.3%
exploitation probability
0.3%top 75% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
A weakness has been identified in SourceCodester Simple Online Food Ordering System 1.0. The affected element is an unknown function of the file /admin/ajax.php?action=save_category. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Affected products
SourceCodester · Simple Online Food Ordering Systempublic PoCs found — 1
cve_referencegithub.com/hubdk01/cve/issues/3unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — SourceCodester Simple Online Food Ordering…
In the same product, most dangerous first.
CVE-2026-78197MEDIUMSourceCodester Simple Online Food Ordering System ajax.php save_user sql injectionEPSS 0.4%CVE-2026-81203MEDIUMSourceCodester Simple Online Food Ordering System ajax.php login2 sql injectionEPSS 0.4%CVE-2026-78248MEDIUMSourceCodester Simple Online Food Ordering System ajax.php save_settings sql injectionEPSS 0.4%CVE-2026-78247MEDIUMSourceCodester Simple Online Food Ordering System ajax.php confirm_order sql injectionEPSS 0.4%CVE-2026-78199MEDIUMSourceCodester Simple Online Food Ordering System view_prod.php sql injectionEPSS 0.4%CVE-2026-78198MEDIUMSourceCodester Simple Online Food Ordering System ajax.php add_to_cart sql injectionEPSS 0.4%