CodeAstro Online Catering Ordering System 1.0 contains a SQL injection vulnerability in the /deleteorder.php file. The vulnerability arises from manipulation of the ID argument, allowing remote attackers to execute unauthorized SQL commands. Public exploit code has been disclosed. The vulnerability has a CVSS score of 6.3, indicating a medium severity level.