PT-2026-26959 · Code Projects · Simple Food Ordering System

Ahmadmarzouk · Published 2026-03-22 · Updated 2026-03-22 · CVE-2026-4532

NVD

CVSS v2.0

5.0

Medium

AV:N/AC:L/Au:N/C:P/I:N/A:N

A security vulnerability has been detected in code-projects Simple Food Ordering System up to 1.0. Affected by this vulnerability is an unknown functionality of the file /food/sql/food.sql of the component Database Backup Handler. The manipulation leads to files or directories accessible. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. It is recommended to change the configuration settings.

Exploit

Fix

Files Accessible to External Parties

Weakness Enumeration

CWE-425

CWE-552

Related Identifiers

CVE-2026-4532

Affected Products

Simple Food Ordering System

References · 6

• 🔥 https://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/Simple%20Food%20Ordering%20System%20Information%20Disclosure%20%20.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-4532 · Security Note
• https://code-projects.org · Note
• https://vuldb.com/?ctiid.352320 · Note
• https://vuldb.com/?id.352320 · Note
• https://vuldb.com/?submit.774338 · Note