Live › vulnerability › CVE-2026-116603
Go to dashboardSourceCodester Online Food Ordering System 1.0 has a flaw in admin/add_food.php where the image argument can be manipulated to upload files without restriction. A remote attacker may be able to upload arbitrary files to the server, and a public exploit has been published.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 00:25 UTC. All times on this page are UTC.
Installations of SourceCodester Online Food Ordering System 1.0 that expose the admin add_food page are affected according to the description. Sources do not say which configurations or roles are required, so unknown.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A flaw has been found in SourceCodester Online Food Ordering System 1.0. Impacted is an unknown function of the file admin/add_food.php. Executing a manipulation of the argument image can lead to unrestricted upload. The attack may be performed from remote. The exploit has been published and may be used.
This page as .md · .json · in your agent: get_signal("CVE-2026-116603")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.