Online Food Ordering System vulnerabilities | LiveThreat CVE Feed

Product

Online Food Ordering System

by Oretnom23 · last CVE Mar 27, 2026

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities29 In the news0 Timeline

Severity mix

Critical 15High 5Medium 9Low 0

Severity

All severities29 Critical15 High5 Medium9 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Online Food Ordering System to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-30532	9.8	0%	Mar 27	A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the admin/view_product.php file via the "id" parameter Affected: 1.0
CVE-2026-30533	9.8	0%	Mar 27	A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the admin/manage_product.php file via the "id" parameter Affected: 1.0
CVE-2026-30530	9.8	0%	Mar 27	A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Actions.php file (specifically the save_customer action) Affected: 1.0
CVE-2025-2387	9.8	1%	Mar 17	A vulnerability was found in SourceCodester Online Food Ordering System 2.0 Affected: 2.0
CVE-2024-0247	9.8	1%	Jan 5	A vulnerability classified as critical was found in CodeAstro Online Food Ordering System 1.0 Affected: 1.0
CVE-2023-30122	9.8	1%	May 5	An arbitrary file upload vulnerability in the component /admin/ajax.php?action=save_menu of Online Food Ordering System v2.0 allows attackers to execute arbitrary code via… Affected: 2.0
CVE-2023-1432	9.8	1%	Mar 16	A vulnerability was found in SourceCodester Online Food Ordering System 2.0 and classified as critical Affected: 2.0
CVE-2023-24646	9.8	1%	Feb 13	An arbitrary file upload vulnerability in the component /fos/admin/ajax.php of Food Ordering System v2.0 allows attackers to execute arbitrary code via a crafted PHP file Affected: 2.0
CVE-2020-29297	9.8	1%	Jan 20	Multiple SQL Injection vulnerabilities in tourist5 Online-food-ordering-system 1.0 Affected: 1.0
CVE-2023-0332	9.8	1%	Jan 17	A vulnerability was found in SourceCodester Online Food Ordering System 2.0 Affected: 2.0
CVE-2023-0257	9.8	1%	Jan 12	A vulnerability was found in SourceCodester Online Food Ordering System 2.0 Affected: 2.0
CVE-2023-0256	9.8	1%	Jan 12	A vulnerability was found in SourceCodester Online Food Ordering System 2.0 Affected: 2.0
CVE-2022-36759	9.8	1%	Sep 2	Online Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the component /dishes.php?res_id= Affected: 1.0
CVE-2022-29650	9.8	1%	May 25	Online Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the Search parameter at /online-food-order/food-search.php Affected: 1.0
CVE-2021-41644	9.8	2%	Oct 29	Remote Code Exection (RCE) vulnerability exists in Sourcecodester Online Food Ordering System 2.0 via a maliciously crafted PHP file that bypasses the image upload filters Affected: 2.0
CVE-2026-30529	8.8	0%	Mar 27	A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Actions.php file (specifically the save_user action) Affected: 1.0
CVE-2026-30531	8.8	0%	Mar 27	A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Actions.php file (specifically the save_category action) Affected: 1.0
CVE-2026-30534	8.3	0%	Mar 27	A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in admin/manage_category.php via the "id" parameter Affected: 1.0
CVE-2023-24647	7.5	1%	Feb 13	Food Ordering System v2.0 was discovered to contain a SQL injection vulnerability via the email parameter Affected: 2.0
CVE-2022-29651	7.2	2%	May 25	An arbitrary file upload vulnerability in the Select Image function of Online Food Ordering System v1.0 allows attackers to execute arbitrary code via a crafted PHP file Affected: 1.0
CVE-2023-27073	6.5	0%	Mar 14	A Cross-Site Request Forgery (CSRF) in Online Food Ordering System v1.0 allows attackers to change user details and credentials via a crafted POST request Affected: 1.0
CVE-2024-8604	6.1	1%	Sep 9	SourceCodester Online Food Ordering System Create an Account Page index.php cross site scripting Affected: 2.0
CVE-2023-24197	6.1	0%	Feb 6	Online Food Ordering System v2 was discovered to contain a SQL injection vulnerability via the id parameter at view_order.php Affected: 2.0
CVE-2023-24195	6.1	0%	Feb 6	Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the page parameter in index.php Affected: 2.0
CVE-2023-24194	6.1	0%	Feb 6	Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the page parameter in navbar.php Affected: 2.0
CVE-2023-24192	6.1	0%	Feb 6	Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the redirect parameter in login.php Affected: 2.0
CVE-2023-24191	6.1	0%	Feb 6	Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the redirect parameter in signup.php Affected: 2.0
CVE-2023-0258	6.1	0%	Jan 12	A vulnerability was found in SourceCodester Online Food Ordering System 2.0 Affected: 2.0
CVE-2026-30527	5.4	0%	Mar 27	A Stored Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Category management module within the admin panel Affected: 1.0