Threats tagged 'ghsa-4cf6-r5pq-4jhc'

SourceCodester Food Ordering System 1.0 contains a SQL injection vulnerability in the /routers/edit-orders.php file. The vulnerability arises from manipulation of the ID parameter, allowing remote attackers to execute unauthorized SQL commands. Exploit code has been publicly disclosed. The vulnerability has a medium severity rating with a CVSS score of 6.3.