PT-2026-26963 · Code Projects · Simple Food Ordering System

Ahmadmarzouk · Published 2026-03-22 · Updated 2026-03-22 · CVE-2026-4533

Mitre

CVSS v3.1

6.3

Medium

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

A vulnerability was detected in code-projects Simple Food Ordering System 1.0. Affected by this issue is some unknown functionality of the file all-tickets.php. The manipulation of the argument Status results in sql injection. It is possible to launch the attack remotely. The exploit is now public and may be used.

Exploit

Fix

SQL injection

Special Elements Injection

Weakness Enumeration

CWE-89

CWE-74

Related Identifiers

CVE-2026-4533

Affected Products

Simple Food Ordering System

References · 6

• 🔥 https://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/SQL%20Injection%20(Time-Based%20Blind)Simple%20Food%20Ordering%20System%20in%20PHP.md?plain=1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-4533 · Security Note
• https://vuldb.com/?submit.774341 · Note
• https://code-projects.org · Note
• https://vuldb.com/?id.352321 · Note
• https://vuldb.com/?ctiid.352321 · Note