PT-2026-27269 · Sourcecodester · Online Catering Reservation

Weqi · Published 2026-03-23 · Updated 2026-03-24 · CVE-2026-4615

Mitre

CVSS v3.1

7.3

High

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

A vulnerability was identified in SourceCodester Online Catering Reservation 1.0. Impacted is an unknown function of the file /search.php. Such manipulation of the argument rcode leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used.

Exploit

Fix

SQL injection

Special Elements Injection

Weakness Enumeration

CWE-89

CWE-74

Related Identifiers

CVE-2026-4615

Affected Products

Online Catering Reservation

References · 6

• 🔥 https://github.com/WHOAMI-xiaoyu/CVE/blob/main/CVE_5.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-4615 · Security Note
• https://sourcecodester.com · Note
• https://vuldb.com/?id.352479 · Note
• https://vuldb.com/?submit.775735 · Note
• https://vuldb.com/?ctiid.352479 · Note