Medium 6.5

A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected...

CVE-2026-116604 First seen on SecPulse 08:45

Affected packages

Ecosystem	Package	Affected	Fixed
SourceCodester	Online Food Ordering System	—	—

Original description The description as published by the source.

A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected element is an unknown function of the file admin/delete_admin.php. The manipulation of the argument ID leads to missing authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory

References

Key facts

CVSS v3: Medium 6.5; CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
CVSS v4: Medium 5.5; CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Published: Oct 27, 2026
First seen on SecPulse: 08:45
GHSA: GHSA-7883-mmgp-3xfp
CWE: CWE-287 CWE-306

NVD GitHub Advisory

Tags(click for explanation)

Programming Languages

PHP

CWE

CWE-306 CWE-287

All

Sourcecodester Online Food Ordering System

Detection sources

NIST National Vulnerability Database09:17
GitHub Security Advisories (Global)09:32
CVE.org (CVE Program・cvelistV5)08:45