CVE WATCH / VULNERABILITY DETAIL
CVE-2026-127284
HIGHCVSS 7.3NVD feed
Published 13 November 2026 · tracked since 13 November 2026
Description
A security flaw has been discovered in SourceCodester Food Ordering System 1.0. This affects an unknown part of the file admin/add_category.php of the component Admin Write Handler. Performing a manipulation of the argument title/description/price/current_image/featured/active/id results in sql inje
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog