Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.9

SourceCodester Online Catering Reservation SQL Injection

CVE-2026-4615
Summary

A security issue exists in SourceCodester Online Catering Reservation 1.0, specifically in the /search.php file. An attacker could manipulate data sent to this file, potentially allowing them to access or modify sensitive information. You should update the software to the latest version to fix this issue.

Original title
A vulnerability was identified in SourceCodester Online Catering Reservation 1.0. Impacted is an unknown function of the file /search.php. Such manipulation of the argument rcode leads to sql injec...
Original description
A vulnerability was identified in SourceCodester Online Catering Reservation 1.0. Impacted is an unknown function of the file /search.php. Such manipulation of the argument rcode leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used.
nvd CVSS2.0 7.5
nvd CVSS3.1 7.3
nvd CVSS4.0 6.9
Vulnerability type
CWE-74 Injection
CWE-89 SQL Injection
Published: 24 Mar 2026 · Updated: 24 Mar 2026 · First seen: 24 Mar 2026