CVE-2026-4841: code-projects Online Food Ordering System Shopping Cart cart.php sql injection
A weakness has been identified in code-projects Online Food Ordering System 1.0. This affects an unknown part of the file form/cart.php of the component Shopping Cart Module. Executing a manipulation of the argument del can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-4841?
CVE-2026-4841 is classified as a high-severity vulnerability due to its potential for SQL injection attacks.
How do I fix CVE-2026-4841?
To fix CVE-2026-4841, update the Online Food Ordering System to a version that has patched the SQL injection vulnerability.
What components are affected by CVE-2026-4841?
CVE-2026-4841 affects the Shopping Cart Module specifically in the form/cart.php file of the Online Food Ordering System 1.0.
What type of vulnerability is CVE-2026-4841?
CVE-2026-4841 is an SQL injection vulnerability which allows attackers to manipulate SQL queries.
Who is the vendor for CVE-2026-4841?
The vendor for CVE-2026-4841 is Code-Projects, which develops the Online Food Ordering System.