PT-2026-26959 · Code Projects · Simple Food Ordering System

Ahmadmarzouk · Published 2026-03-22 · Updated 2026-03-22 · CVE-2026-4532

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions code-projects Simple Food Ordering System version 1.0

Description A security issue exists in code-projects Simple Food Ordering System version 1.0, specifically within the Database Backup Handler component and the /food/sql/food.sql file. The issue allows for remote access to files and directories. The exploit has been publicly disclosed.

Recommendations Change the configuration settings.

Exploit

Fix

Files Accessible to External Parties

Weakness Enumeration

CWE-552

CWE-425

Related Identifiers

CVE-2026-4532

Affected Products

Simple Food Ordering System

References · 9

• 🔥 https://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/Simple%20Food%20Ordering%20System%20Information%20Disclosure%20%20.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-4532 · Security Note
• https://vuldb.com/?id.352320 · Note
• https://twitter.com/cyberbivash/status/2035542186427642064 · Twitter Post
• https://vuldb.com/?ctiid.352320 · Note
• https://twitter.com/CVEnew/status/2035619716518257028 · Twitter Post
• https://twitter.com/CVEarity/status/2035760889497063763 · Twitter Post
• https://code-projects.org · Note
• https://vuldb.com/?submit.774338 · Note