CVE-2026-116602 | SourceCodester Online Food Ordering System 1.0 admin/delete.php unlink image_name path traversal

October 26, 2026 Yanac

A vulnerability marked as critical has been reported in SourceCodester Online Food Ordering System 1.0. This issue affects the function unlink of the file admin/delete.php. Performing a manipulation of the argument image_name results in path traversal.

This vulnerability is reported as CVE-2026-116602. The attack is possible to be carried out remotely. Moreover, an exploit is present.VulDB Recent EntriesRead More