CVE-2026-78198 | SourceCodester Simple Online Food Ordering System 1.0 ajax.php?action=add_to_cart pid sql injection

August 23, 2026 Yanac

A vulnerability described as critical has been identified in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /fos/admin/ajax.php?action=add_to_cart. Such manipulation of the argument pid leads to sql injection.

This vulnerability is traded as CVE-2026-78198. The attack may be launched remotely. Furthermore, there is an exploit available.VulDB Recent EntriesRead More