Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1110 CNY

100%

Online Food Ordering System — Vulnerabilities & Security Advisories 48

All 48 CVE vulnerabilities found in Online Food Ordering System, with AI-generated Chinese analysis, references, and POCs.

This page documents vulnerability aggregations for the Online Food Ordering System product, focusing on general weakness classifications and specific vendor tags. It collects detailed reports on security flaws identified across various platforms and applications that facilitate digital meal ordering and delivery services. The data spans from early 2021 through the present day, ensuring a comprehensive view of the evolving threat landscape within the food technology sector. This timeframe captures critical incidents that have impacted user data integrity, service availability, and payment processing security in widely used ordering interfaces. Visitors to this resource can track individual vendor advisories to stay informed about patch releases and mitigation strategies for known issues. The page also allows for a deeper understanding of specific weakness classes, such as injection flaws or insecure direct object references, as they manifest in food ordering contexts. Users may look up a specific product’s vulnerability history to assess long-term security hygiene and identify recurring patterns in code quality or configuration management. By analyzing these aggregated insights, security professionals, developers, and auditors can better evaluate the risk posture of online food ordering systems. This resource serves as a neutral reference for comparing security postures across different vendors and understanding the technical specifics of reported defects. It supports informed decision-making regarding software procurement, risk assessment, and remediation efforts without endorsing any particular commercial entity or solution.

Vendor: SourceCodester

CVE IDTitleCVSSSeverityPublished
CVE-2026-5811 SourceCodester Online Food Ordering System POST Parameter Actions.php save_product logic error CWE-840 5.4 Medium2026-04-08
CVE-2026-5157 code-projects Online Food Ordering System Order order.php cross site scripting CWE-79 4.3 Medium2026-03-30
CVE-2026-4900 code-projects Online Food Ordering System localhost.sql privilege escalation CWE-552 5.3 Medium2026-03-26
CVE-2026-4899 code-projects Online Food Ordering System food.php cross site scripting CWE-79 2.4 Low2026-03-26
CVE-2026-4898 code-projects Online Food Ordering System contact.php cross site scripting CWE-79 4.3 Medium2026-03-26
CVE-2026-4844 code-projects Online Food Ordering System Admin Login admin.php sql injection CWE-89 7.3 High2026-03-26
CVE-2026-4841 code-projects Online Food Ordering System Shopping Cart cart.php sql injection CWE-89 7.3 High2026-03-26
CVE-2026-2136 projectworlds Online Food Ordering System view-ticket.php sql injection CWE-89 7.3 High2026-02-08
CVE-2025-4936 projectworlds Online Food Ordering System admin-page.php sql injection CWE-89 7.3 High2025-05-19
CVE-2025-4549 Campcodes Online Food Ordering System register-router.php sql injection CWE-89 7.3 High2025-05-11
CVE-2025-4548 Campcodes Online Food Ordering System router.php sql injection CWE-89 7.3 High2025-05-11
CVE-2025-4507 Campcodes Online Food Ordering System add-item.php sql injection CWE-89 7.3 High2025-05-10
CVE-2025-4506 Campcodes Online Food Ordering System menu-router.php sql injection CWE-89 7.3 High2025-05-10
CVE-2025-4492 Campcodes Online Food Ordering System ticket-message.php sql injection CWE-89 7.3 High2025-05-09
CVE-2025-4491 Campcodes Online Food Ordering System ticket-status.php sql injection CWE-89 7.3 High2025-05-09
CVE-2025-4490 Campcodes Online Food Ordering System view-ticket-admin.php sql injection CWE-89 7.3 High2025-05-09
CVE-2025-4489 Campcodes Online Food Ordering System user-router.php sql injection CWE-89 7.3 High2025-05-09
CVE-2025-2387 SourceCodester Online Food Ordering System ajax.php sql injection CWE-89 7.3 High2025-03-17
CVE-2024-13070 CodeAstro Online Food Ordering System Update User Page update_users.php sql injection CWE-89 6.3 Medium2024-12-31
CVE-2024-13067 CodeAstro Online Food Ordering System All Users Page all_users.php access control CWE-284 5.3 Medium2024-12-31
CVE-2024-8604 SourceCodester Online Food Ordering System Create an Account Page index.php cross site scripting CWE-79 4.3 Medium2024-09-09
CVE-2024-7838 itsourcecode Online Food Ordering System addcategory.php sql injection CWE-89 7.3 High2024-08-15
CVE-2024-7189 itsourcecode Online Food Ordering System editproduct.php unrestricted upload CWE-434 6.3 Medium2024-07-29
CVE-2024-6373 itsourcecode Online Food Ordering System addproduct.php unrestricted upload CWE-434 7.3 High2024-06-27
CVE-2024-6253 itsourcecode Online Food Ordering System purchase.php sql injection CWE-89 7.3 High2024-06-22
CVE-2024-0423 CodeAstro Online Food Ordering System dishes.php cross site scripting CWE-79 3.5 Low2024-01-11
CVE-2024-0247 CodeAstro Online Food Ordering System Admin Panel sql injection CWE-89 7.3 High2024-01-05
CVE-2023-45347 Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi) CWE-89 9.8 Critical2023-11-02
CVE-2023-45346 Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi) CWE-89 9.8 Critical2023-11-02
CVE-2023-45345 Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi) CWE-89 9.8 Critical2023-11-02

All 48 known CVE vulnerabilities affecting Online Food Ordering System with full Chinese analysis, references, and POCs where available.