PT-2026-28208 · Code Projects · Online Food Ordering System

Abhiram T · Published 2026-03-26 · Updated 2026-03-26 · CVE-2026-4844

NVD

CVSS v2.0

7.5

High

AV:N/AC:L/Au:N/C:P/I:P/A:P

A vulnerability was detected in code-projects Online Food Ordering System 1.0. This issue affects some unknown processing of the file /admin.php of the component Admin Login Module. The manipulation of the argument Username results in sql injection. The attack may be performed from remote. The exploit is now public and may be used. Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Exploit

Fix

SQL injection

Special Elements Injection

Weakness Enumeration

CWE-89

CWE-74

Related Identifiers

CVE-2026-4844

Affected Products

Online Food Ordering System

References · 6

• 🔥 https://gist.github.com/HxH404/8e5bd42c0f968a92a23edc5e7b879955 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-4844 · Security Note
• https://vuldb.com/?submit.776137 · Note
• https://vuldb.com/?id.353149 · Note
• https://code-projects.org · Note
• https://vuldb.com/?ctiid.353149 · Note