CVE-2026-4532

MEDIUM

code-projects Simple Food Ordering System Database Backup food.sql file access

Title source: cna
STIX 2.1

Description

A security vulnerability has been detected in code-projects Simple Food Ordering System up to 1.0. Affected by this vulnerability is an unknown functionality of the file /food/sql/food.sql of the component Database Backup Handler. The manipulation leads to files or directories accessible. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. It is recommended to change the configuration settings.

References (5)

Core 5
Core References
Vdb Entry vdb-entry
VDB-352320 | code-projects Simple Food Ordering System Database Backup food.sql file access
https://vuldb.com/?id.352320
Signature, Permissions Required signature permissions-required
VDB-352320 | CTI Indicators (IOB, IOC, TTP, IOA)
https://vuldb.com/?ctiid.352320
Third Party Advisory third-party-advisory
Submit #774338 | Code-Projects Simple Food Ordering System in PHP 1.0 Information Disclosure
https://vuldb.com/?submit.774338
Product product
https://code-projects.org/

Scores

CVSS v3 5.3
EPSS 0.0045
EPSS Percentile 35.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact partial

Details

CWE
CWE-425 CWE-552
Status published
Products (2)
carmelo/simple_food_order_system 1.0
code-projects/Simple Food Ordering System 1.0
Published Mar 22, 2026
Tracked Since Mar 22, 2026