PT-2026-55689 · Jairiidriss · Restaurant-Website-Php-Mysql

Fklov · Published 2026-07-04 · Updated 2026-07-04 · CVE-2026-14622

Mitre

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

A vulnerability was found in jairiidriss restaurant-website-php-mysql up to 521428b5b612449df0cf4a5d15ee40cba67f3d35. This vulnerability affects unknown code of the file /admin/ajax files of the component AJAX Endpoint. Performing a manipulation results in missing authentication. The attack is possible to be carried out remotely. The exploit has been made public and could be used. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The project was informed of the problem early through an issue report but has not responded yet.

Exploit

Fix

Improper Authentication

Missing Authentication

Weakness Enumeration

CWE-287

CWE-306

Related Identifiers

CVE-2026-14622

Affected Products

Restaurant-Website-Php-Mysql

References · 7

• 🔥 https://github.com/jairiidriss/restaurant-website-php-mysql/issues/6 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-14622 · Security Note
• https://vuldb.com/cve/CVE-2026-14622 · Note
• https://vuldb.com/vuln/376138 · Note
• https://github.com/jairiidriss/restaurant-website-php-mysql · Note
• https://vuldb.com/vuln/376138/cti · Note
• https://vuldb.com/submit/845099 · Note