PT-2026-28404 · Oretnom23 · Online Food Ordering System

CVE-2026-30531 · Publicado 2026-03-27 · Atualizado 2026-03-27

Mitre

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Actions.php file (specifically the save category action). The application fails to properly sanitize user input supplied to the "name" parameter. This allows an authenticated attacker to inject malicious SQL commands.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2026-30531

Produtos afetados

Online Food Ordering System

Referências · 2

• 🔥 https://github.com/meifukun/Web-Security-PoCs/blob/main/Online-Food-Ordering-System/SQLi-Actions-saveCategory-name.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-30531 · Nota de Segurança