PT-2026-56654 · Code Projects · Online Food Ordering System

Zhaoyihao · Published 2026-07-08 · Updated 2026-07-09 · CVE-2026-15135

Mitre

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

A security flaw has been discovered in code-projects Online Food Order System 1.0. This affects an unknown part of the file /edit food items.php. The manipulation of the argument update results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2026-15135

Affected Products

Online Food Ordering System

References · 7

• 🔥 https://github.com/susususua-AI/CVE/issues/1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-15135 · Security Note
• https://vuldb.com/vuln/376951 · Note
• https://vuldb.com/cve/CVE-2026-15135 · Note
• https://code-projects.org · Note
• https://vuldb.com/vuln/376951/cti · Note
• https://vuldb.com/submit/851065 · Note