CVE-2026-5811: SourceCodester Online Food Ordering System POST Parameter Actions.php save_product logic error
A vulnerability was identified in SourceCodester Online Food Ordering System 1.0. Affected by this issue is the function saveproduct of the file /Actions.php of the component POST Parameter Handler. Such manipulation of the argument price leads to business logic errors. The attack may be performed from remote. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-5811?
CVE-2026-5811 is classified as a logic error vulnerability, which can lead to unauthorized actions within the SourceCodester Online Food Ordering System.
How do I fix CVE-2026-5811?
To fix CVE-2026-5811, update the SourceCodester Online Food Ordering System to the latest version available, ensuring that the save_product function in Actions.php is properly validated.
What products are affected by CVE-2026-5811?
CVE-2026-5811 affects SourceCodester Online Food Ordering System version 1.0 specifically.
What type of vulnerability is CVE-2026-5811?
CVE-2026-5811 is a logic error vulnerability regarding POST parameter handling in the save_product function.
Can CVE-2026-5811 be exploited remotely?
Yes, CVE-2026-5811 can potentially be exploited remotely if the vulnerable version of the SourceCodester Online Food Ordering System is accessible.