CVE-2026-127284

A security flaw has been discovered in SourceCodester Food Ordering System 1.0. This affects an unknown part of the file admin/add_category.php of the component Admin Write Handler. Performing a manipulation of the argument title/description/price/current_image/featured/active/id results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks.

• CWE-74
• CWE-89

• https://github.com/yuechuya/sourcecodester-vuln-reports/blob/main/reports/Food-Ordering-System/VULN-F2-Unauth-SQL-Injection.md
• https://vuldb.com/cve/CVE-2026-127284
• https://vuldb.com/submit/1041049
• https://vuldb.com/vuln/436450
• https://vuldb.com/vuln/436450/cti
• https://www.sourcecodester.com/

Published

Nov 13, 2026

Last Modified

Nov 13, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-127278A weakness has been identified in AIP-PUB ACPs-community up …7.3
• CVE-2026-127279A vulnerability was detected in AIP-PUB ACPs-community up to…7.3
• CVE-2026-12728IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.4…8.8
• CVE-2026-127281A vulnerability was found in lanyulei ferry 1.0.0-beta.1/1.0…7.3
• CVE-2026-127282A vulnerability was determined in SourceCodester Smart Atten…4.3
• CVE-2026-127283A vulnerability was identified in SourceCodester Food Orderi…7.3
• CVE-2026-127285A flaw has been found in Cairo-dock Glx-Dock 3.4.0. The affe…4.3
• CVE-2026-127286A vulnerability was identified in Zackriya-Solutions Meetily…7.3
• CVE-2026-12729The weDocs: AI Powered Knowledge Base, Docs, Documentation, …4.3
• CVE-2026-1273The Post Grid Gutenberg Blocks for News, Magazines, Blog Web…7.2
• CVE-2026-12730IBM Business Automation Workflow containers and traditional …3.8
• CVE-2026-12731The weDocs: AI Powered Knowledge Base, Docs, Documentation, …6.4