CVE-2026-5017 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A security flaw has been discovered in code-projects Simple Food Order System 1.0. This impacts an unknown function of the file /all-tickets.php of the componen…
Medium CVSS: 6.9

CVE-2026-5017

A security flaw has been discovered in code-projects Simple Food Order System 1.0. This impacts an unknown function of the file /all-tickets.php of the component Parameter Handler. Performing a manipulation of the argument Status results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks.
Vendor
Carmelo
Product
Simple Food Order System
CWE
CWE-74
Yayın Tarihi
2026-03-28 23:16:43
Güncelleme
2026-04-02 20:34:00
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-74 Simple Food Order System MEDIUM Carmelo 2026

Referanslar

https://code-projects.org/ https://github.com/6Justdododo6/CVE/issues/15 https://vuldb.com/submit/779331 https://vuldb.com/vuln/353902 https://vuldb.com/vuln/353902/cti