Medium severity6.3NVD Advisory· Published Aug 20, 2026

CVE-2026-76997

Description

A weakness has been identified in SourceCodester Simple Online Food Ordering System 1.0. The affected element is an unknown function of the file /admin/ajax.php?action=save_category. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks.

Affected products

Sourcecodester/Simple Online Food Ordering Systemllm-fuzzy
Range: = 1.0

Patches

Vulnerability mechanics

References

github.com/hubdk01/cve/issues/3nvd
vuldb.com/cve/CVE-2026-76997nvd
vuldb.com/submit/880392nvd
vuldb.com/vuln/393620nvd
vuldb.com/vuln/393620/ctinvd
www.sourcecodester.comnvd

News mentions

No linked articles in our index yet.

cvss	0.410
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000