CVE-2026-76050: SourceCodester Simple Online Food Ordering System ajax.php delete_menu sql injection
A vulnerability was found in SourceCodester Simple Online Food Ordering System 1.0. This impacts an unknown function of the file /admin/ajax.php?action=deletemenu. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
Does exploitation require authentication or user interaction?
The supplied CVSS vector indicates no privileges and no user interaction are required. The attack can be launched remotely.
Which deployments are exposed to this issue?
SourceCodester Simple Online Food Ordering System version 1.0 is identified as affected. Deployments in which an attacker can reach the affected administrative AJAX endpoint are exposed to remote exploitation.
Is a patch or workaround identified?
The provided information does not identify a fixed version or a workaround. It also states that a public exploit is available.