CVE-2026-30530: SQL Injection
A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Actions.php file (specifically the savecustomer action). The application fails to properly sanitize user input supplied to the "username" parameter. This allows an attacker to inject malicious SQL commands.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-30530?
CVE-2026-30530 is classified as a high severity SQL Injection vulnerability.
How do I fix CVE-2026-30530?
To fix CVE-2026-30530, ensure that all user inputs, particularly the 'username' parameter in the Actions.php file, are properly sanitized and validated.
What software is affected by CVE-2026-30530?
CVE-2026-30530 affects version 1.0 of the SourceCodester Online Food Ordering System.
What kind of attack can be executed through CVE-2026-30530?
CVE-2026-30530 allows an attacker to perform a SQL Injection attack by injecting malicious SQL commands.
Where can I find more details about CVE-2026-30530?
More details regarding CVE-2026-30530 can be found in the official documentation and vulnerability databases.