high7.3
CVE-2026-2136
A flaw has been found in projectworlds Online Food Ordering System 1.0.
Impact
A flaw has been found in projectworlds Online Food Ordering System 1.0. This affects an unknown function of the file /view-ticket.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Projectworlds | Online Food Ordering System | Version 1.0 |