CVE-2026-26712 - Vulnerability Analysis

Overview

code-projects Simple Food Order System v1.0 contains a sql injection caused by unsanitized input in /food/view-ticket-admin.php, letting attackers execute arbitrary SQL commands remotely, exploit requires no special privileges.

Severity & Score

Impact

Attackers can execute arbitrary SQL commands, potentially leading to data theft or modification.

Mitigation

Update to the latest version or apply patches that sanitize SQL inputs.

References

• https://github.com/Thirtypenny77/bug_report/blob/main/code-projects/simple-food-order-system/SQL-1.md

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner