CVE-2026-30534 - Vulnerability Analysis

Overview

SourceCodester Online Food Ordering System v1.0 contains a sql injection caused by unsanitized "id" parameter in admin/manage_category.php, letting attackers execute arbitrary SQL commands remotely, exploit requires crafted request.

Severity & Score

Impact

Attackers can execute arbitrary SQL commands, potentially leading to data theft or modification.

Mitigation

Update to the latest version or apply patches that sanitize the "id" parameter.

References

• https://github.com/meifukun/Web-Security-PoCs/blob/main/Online-Food-Ordering-System/SQLi-ManageCategory-id.md

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner