CyberRota Analysis
AI-GeneratedThe SourceCodester Simple Online Food Ordering System 1.0 is vulnerable to SQL injection through the manipulation of the 'pid' parameter in the /fos/admin/ajax.php?action=add_to_cart file, allowing attackers to execute arbitrary SQL queries remotely. This high-severity vulnerability poses a significant risk of data exposure and unauthorized access to the database. Organizations using this system should prioritize patching this vulnerability to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A security vulnerability has been detected in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /fos/admin/ajax.php?action=add_to_cart. Such manipulation of the argument pid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.