PT-2026-22685 · Code Projects · Simple Food Ordering System

Thirtypenny77 · Published 2026-03-02 · Updated 2026-03-03 · CVE-2026-26710

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions code-projects Simple Food Order System version 1.0

Description The Simple Food Order System version 1.0 is susceptible to SQL Injection. This issue affects the /food/routers/edit-orders.php endpoint. The edit-orders.php file is vulnerable, potentially allowing attackers to manipulate database queries. The vulnerable parameter is not specified.

Recommendations Apply appropriate input validation and sanitization techniques to prevent SQL Injection attacks in the /food/routers/edit-orders.php endpoint.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2026-26710

Affected Products

Simple Food Ordering System

References · 6

• 🔥 https://github.com/Thirtypenny77/bug_report/blob/main/code-projects/simple-food-order-system/SQL-3.md · Exploit
• https://osv.dev/vulnerability/CVE-2026-26710 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-26710 · Security Note
• https://twitter.com/VulmonFeeds/status/2028709144266445297 · Twitter Post
• https://twitter.com/CVEnew/status/2028558319460503736 · Twitter Post
• https://t.me/CVEtracker/46161 · Telegram Post