CVE-2026-2136Disclosure(projectworlds / online_food_ordering_system)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A flaw has been found in projectworlds Online Food Ordering System 1.0. This affects an unknown function of the file /view-ticket.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used.

projectworlds CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

https://github.com/hater-us/CVE/issues/4

Vendor / third-party advisories

Other references

https://vuldb.com/?ctiid.344771

Weakness type (CWE)

CWE-74CWE-89

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

online_food_ordering_system

Threat summary

3 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 1 signal
Disclosure: 2 classified signals
General: 1 classified signal
Peaked 1d ago at 2 mentions (2026-02-08); latest day: 1
3 total mentions across 2 days

Affected systems

Vendors

projectworlds

Products

online_food_ordering_system

1 version affected across 1 product

Deep dive

Activity timeline3 mentions / 2d

Signal classification2 categories

Disclosure

266.7%

General

133.3%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-02-08	2	Disclosure1General1
2026-02-13	1	Disclosure1

Full discourse3 posts

CVE@CVEnew242d
Disclosure
CVE-2026-2136 A flaw has been found in projectworlds Online Food Ordering System 1.0. This affects an unknown function of the file /view-ticket.php. Executing a manipulation of the a… https://www.cve.org/CVERecord?id=CVE-2026-2136
Post summary
A flaw has been discovered in ProjectWorlds Online Food Ordering System 1.0 affecting an unknown function in /view-ticket.php; the vulnerability is identified as CVE-2026-2136.
00010279
56.5K followersView on X
CRAC Learning - Tech@cracbot237d
Disclosure
CVE-2026-2136 (CVSS:6.9, HIGH) is Analyzed. A flaw has been found in projectworlds Online Food Ordering System 1.0. This affects an unknown function of the file /vi..https://nvd.nist.gov/vuln/detail/CVE-2026-2136 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
CVE-2026-2136 is a high‑severity flaw in ProjectWorlds Online Food Ordering System 1.0 that has been identified and analyzed, but no PoC, exploit, or patch information is provided.
0000035
171 followersView on X
RedPacket Security@RedPacketSec242d
General
CVE Alert: CVE-2026-2136 - projectworlds - Online Food Ordering System - https://www.redpacketsecurity.com/cve-alert-cve-2026-2136-projectworlds-online-food-ordering-system/ #OSINT #ThreatIntel #CyberSecurity #cve-2026-2136 #projectworlds #online-food-ordering-system
Post summary
The tweet announces CVE-2026-2136 for ProjectWorlds’ online food ordering system and links to an external CVE alert page, but offers no additional technical details or actionable information.
0000099
3.5K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	projectworlds	online_food_ordering_system	1.0	-	-

Explore more

Back to dashboard projectworlds CVEs online_food_ordering_system vulnerabilities