CVE-2026-4844: SQL Injection in code-projects Online Food Ordering System
CVE-2026-4844 is a medium severity SQL injection vulnerability in version 1. 0 of the code-projects Online Food Ordering System. It affects the Admin Login Module via the /admin. php file, where manipulation of the Username argument can lead to SQL injection. The vulnerability can be exploited remotely without authentication. Although the exploit is publicly available, there are no known exploits in the wild at this time. No official patch or remediation guidance has been provided yet.
AI Analysis
Technical Summary
This vulnerability exists in the Online Food Ordering System 1.0 by code-projects, specifically in the Admin Login Module's /admin.php file. An attacker can manipulate the Username parameter to perform SQL injection attacks remotely without requiring privileges or user interaction. The CVSS 4.0 base score is 6.9, indicating a medium severity level. The vulnerability is publicly disclosed but lacks an official patch or vendor advisory detailing remediation.
Potential Impact
Successful exploitation allows an unauthenticated remote attacker to perform SQL injection via the Username parameter in the admin login component. This could lead to unauthorized access or data manipulation within the system's database. However, the impact is rated medium, and no active exploitation has been reported.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, it is recommended to implement input validation and parameterized queries on the Username parameter to mitigate SQL injection risks. Monitor for vendor updates regarding patches or official mitigations.
CVE-2026-4844: SQL Injection in code-projects Online Food Ordering System
Description
CVE-2026-4844 is a medium severity SQL injection vulnerability in version 1. 0 of the code-projects Online Food Ordering System. It affects the Admin Login Module via the /admin. php file, where manipulation of the Username argument can lead to SQL injection. The vulnerability can be exploited remotely without authentication. Although the exploit is publicly available, there are no known exploits in the wild at this time. No official patch or remediation guidance has been provided yet.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability exists in the Online Food Ordering System 1.0 by code-projects, specifically in the Admin Login Module's /admin.php file. An attacker can manipulate the Username parameter to perform SQL injection attacks remotely without requiring privileges or user interaction. The CVSS 4.0 base score is 6.9, indicating a medium severity level. The vulnerability is publicly disclosed but lacks an official patch or vendor advisory detailing remediation.
Potential Impact
Successful exploitation allows an unauthenticated remote attacker to perform SQL injection via the Username parameter in the admin login component. This could lead to unauthorized access or data manipulation within the system's database. However, the impact is rated medium, and no active exploitation has been reported.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, it is recommended to implement input validation and parameterized queries on the Username parameter to mitigate SQL injection risks. Monitor for vendor updates regarding patches or official mitigations.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-03-25T14:47:02.744Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 69c4c10df4197a8e3be33f13
Added to database: 3/26/2026, 5:15:57 AM
Last enriched: 4/3/2026, 1:16:14 PM
Last updated: 5/7/2026, 5:07:08 AM
Views: 59
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.