PT-2026-28664 · Code Projects · Online Food Ordering System

Ahmadmarzook · Publicado 2026-03-26 · Atualizado 2026-03-27 · CVE-2026-4900

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions code-projects Online Food Ordering System version 1.0

Description A weakness exists in code-projects Online Food Ordering System 1.0. The issue affects an unknown part of the file /dbfood/localhost.sql, potentially leading to unauthorized access to files or directories. The attack can be initiated remotely, and an exploit has been publicly released. Modifying the configuration settings is advised.

Recommendations Modify the configuration settings.

Exploit

Correção

Files Accessible to External Parties

Enumeração de Fraquezas

CWE-552

CWE-425

Identificadores relacionados

CVE-2026-4900

Produtos afetados

Online Food Ordering System

Referências · 7

• 🔥 https://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/Online%20Food%20Ordering%20System%20in%20PHP%201.0%20%E2%80%93%20Sensitive%20Information%20Disclosure.md · Exploit
• https://vuldb.com/?id.353642 · Nota
• https://vuldb.com/?submit.776980 · Nota
• https://code-projects.org · Nota
• https://vuldb.com/?ctiid.353642 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-4900 · Nota de Segurança
• https://twitter.com/CVEnew/status/2037513417431326987 · Publicação no Twitter