CVE-2026-5017: code-projects Simple Food Order System Parameter all-tickets.php sql injection
A security flaw has been discovered in code-projects Simple Food Order System 1.0. This impacts an unknown function of the file /all-tickets.php of the component Parameter Handler. Performing a manipulation of the argument Status results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-5017?
CVE-2026-5017 is considered a high severity vulnerability due to its exploitation potential via SQL injection.
How can I mitigate CVE-2026-5017?
To mitigate CVE-2026-5017, validate and sanitize user input in the all-tickets.php file to prevent SQL injection.
What are the consequences of exploiting CVE-2026-5017?
Exploiting CVE-2026-5017 could allow an attacker to execute arbitrary SQL queries on the underlying database.
Which software is affected by CVE-2026-5017?
CVE-2026-5017 affects version 1.0 of the code-projects Simple Food Order System.
Is there an existing patch for CVE-2026-5017?
As of now, there is no official patch available for CVE-2026-5017, so implementing secure coding practices is essential.