CVE-2026-127284 | SourceCodester Food Ordering System 1.0 Admin Write admin/add_category.php sql injection

A vulnerability classified as critical has been found in SourceCodester Food Ordering System 1.0. This affects an unknown part of the file admin/add_category.php of the component Admin Write Handler. Performing a manipulation of the argument title/description/price/current_image/featured/active/id results in sql injection.

This vulnerability is cataloged as CVE-2026-127284. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.VulDB Recent EntriesRead More