Login Request a demo
High severity · published Mar 26, 2026
CVE-2026-4844
code-projects Online Food Ordering System Admin Login admin.php sql injection
7.3
CVSS
0.3%
EPSS
No
On KEV
Description
A vulnerability was detected in code-projects Online Food Ordering System 1.0. This issue affects some unknown processing of the file /admin.php of the component Admin Login Module. The manipulation of the argument Username results in sql injection. The attack may be performed from remote. The exploit is now public and may be used.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 26% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OF
Online Food Ordering System · code-projects
1.0 · source: vendor
Affected product
OF
Online Food Ordering System
code-projects
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-4844
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-4844
code-projects.org
https://code-projects.org/
gist.github.com
https://gist.github.com/HxH404/8e5bd42c0f968a92a23edc5e7b879955
vuldb.com
https://vuldb.com/?ctiid.353149
vuldb.com
https://vuldb.com/?id.353149
vuldb.com
https://vuldb.com/?submit.776137
More from Online Food Ordering System
7.3
CVE-2026-4841
code-projects Online Food Ordering System Shopping Cart cart.php sql injection
5.3
CVE-2026-4900
code-projects Online Food Ordering System localhost.sql privilege escalation
4.3
CVE-2026-5157
code-projects Online Food Ordering System Order order.php cross site scripting
4.3
CVE-2026-4898
code-projects Online Food Ordering System contact.php cross site scripting
2.4
CVE-2026-4899
code-projects Online Food Ordering System food.php cross site scripting