PT-2026-22686 · Unknown · Simple Food Ordering System

Thirtypenny77 · Published 2026-03-02 · Updated 2026-03-02 · CVE-2026-26711

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Simple Food Order System version 1.0

Description The Simple Food Order System version 1.0 is susceptible to SQL Injection. This issue affects the /food/view-ticket.php endpoint. The ticket id parameter within this endpoint is likely vulnerable. Successful exploitation could allow an attacker to manipulate database queries, potentially leading to unauthorized access, data modification, or disclosure.

Recommendations Apply input validation and sanitization to the ticket id parameter in the /food/view-ticket.php endpoint to prevent the injection of malicious SQL code.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2026-26711

Affected Products

Simple Food Ordering System

References · 6

• 🔥 https://github.com/Thirtypenny77/bug_report/blob/main/code-projects/simple-food-order-system/SQL-2.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-26711 · Security Note
• https://osv.dev/vulnerability/CVE-2026-26711 · Vendor Advisory
• https://twitter.com/CVEnew/status/2028558320370683919 · Twitter Post
• https://twitter.com/infoflowcloud/status/2028558708112822432 · Twitter Post
• https://t.me/CVEtracker/46162 · Telegram Post