VulnSocial

CVE-2026-76048Disclosure

LOWCVSS 5.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A flaw has been found in SourceCodester Simple Online Food Ordering System 1.0. The impacted element is an unknown function of the file /admin/ajax.php?action=login. Executing a manipulation of the argument Username can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-74CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-08-18: 1Technical Details · 2026-08-18: 108-18
Signal classification1 categories
Disclosure
1100.0%
Referenced assets1 URL
Full discourse1 post
  • Cyber Research@Cyb3rR3s34rch
    Disclosure

    Public VulDB reports three remotely reachable SQL injection flaws (CVE-2026-76048, CVE-2026-76049, CVE-2026-76050) in SourceCodester Simple Online Food Ordering System 1.0 on /admin/ajax.php, rated critical with exploits said to be available. https://cyberresearch.us/research/sourcecodester-simple-online-food-ordering-2026-08/

    Post summary

    Three critical, remotely reachable SQL injection flaws were disclosed in SourceCodester Simple Online Food Ordering System 1.0, with mentions that exploits may exist but no details on active attacks, patches, or PoCs.

    0000049
    69 followersView on X

Explore more

Back to dashboard