This vulnerability in code-projects Online Food Ordering System 1.0 allows remote attackers to access files or directories due to improper access controls on the /dbfood/localhost.sql file. The CVSS 4.0 score is 6.9 (medium), reflecting network attack vector, low complexity, no privileges or user interaction required, and limited confidentiality impact. Exploit code is publicly available, increasing the risk of exploitation. No patch or official vendor guidance is currently documented, so mitigation relies on configuration changes.

Successful exploitation can lead to unauthorized access to sensitive files or directories on the affected system, potentially exposing database information or other critical data. The vulnerability does not require authentication or user interaction, making it easier to exploit remotely. However, the impact is limited to confidentiality with no integrity or availability effects noted.

No official patch or vendor advisory is currently available. It is advisable to modify the system's configuration settings to restrict access to sensitive files such as /dbfood/localhost.sql. Monitor vendor channels for any forthcoming official fixes or guidance. Until then, restrict network access to the affected system and review file permissions to minimize exposure.