CVE-2026-116605: SourceCodester Online Food Ordering System order.php client-side enforcement of server-side security
Published Oct 27, 2026
·Updated
A vulnerability was found in SourceCodester Online Food Ordering System 1.0. The impacted element is an unknown function of the file order.php. The manipulation of the argument price/title results in client-side enforcement of server-side security. It is possible to launch the attack remotely. The exploit has been made public and could be used.
Affected Software
1 affected component
Sourcecodester Online Food Ordering System=1.0
Event History
Oct 27, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
The attack can be launched remotely and requires no privileges or user interaction, according to the supplied CVSS vector. An attacker can manipulate the price or title argument handled by order.php.
2
Is public exploit code available?
Yes. The exploit has been made public and could be used.
3
What security impact is indicated?
The reported impact is limited to integrity, with no reported confidentiality or availability impact. The CVSS severity is medium at 5.3.