Threats Tagged 'cve-2026-4533'

CVE-2026-4533 is a medium severity SQL injection vulnerability found in version 1.0 of the code-projects Simple Food Ordering System, specifically in the all-tickets.php file. The vulnerability arises from improper sanitization of the 'Status' parameter, allowing remote attackers to inject malicious SQL commands without authentication or user interaction. Although the exploit code is publicly available, there are no confirmed reports of active exploitation in the wild. Successful exploitation could lead to unauthorized data access or modification within the affected database, impacting confidentiality and integrity. The vulnerability affects a niche food ordering system product, limiting its widespread impact but posing risks to organizations using this software. Mitigation requires immediate input validation and parameterized queries in the affected code, along with monitoring and restricting access to the vulnerable endpoint. Countries with notable usage of this software or similar web applications, including the United States, India, United Kingdom, Canada, Australia, and Germany, may face higher risks. Organizations should prioritize patching or applying workarounds to prevent potential data breaches or service disruptions.

MediumVulnerabilityUnited StatesIndiaUnited Kingdom+7#cve#cve-2026-4533