Threats tagged 'ghsa-8f79-w7h9-x6c8'

SourceCodester Food Ordering System 1.0 contains a SQL injection vulnerability in the admin/add_category.php file within the Admin Write Handler component. The flaw arises from improper handling of the title, description, price, current_image, featured, active, and id parameters, allowing remote attackers to manipulate these arguments to execute SQL injection attacks. Public exploit code is available, increasing the risk of exploitation. The vulnerability has a CVSS 3.1 score of 7.3, indicating high severity.