CVE-2026-76998 in Simple Online Food Ordering System

Résumé

par MITRE • 20/08/2026

A security vulnerability has been detected in SourceCodester Simple Online Food Ordering System 1.0. The impacted element is an unknown function of the file /admin/ajax.php?action=delete_category. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsable: VulDB
• Divulgation: 20/08/2026
• Modérer: accepté
• Entrée: VDB-393621
• CPE: prêt
• CWE: CWE-89 (confirmé)
• Exploitation: Télécharger
• CVSS: 7.3 (VulDB)
• EPSS: 0.00000
• KEV: non
• Activités: faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-76998
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-76998
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-76998/