Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.5
Simple Food Ordering System SQL File Access Risk
CVE-2026-4532
Summary
An unknown part of the Simple Food Ordering System's database backup feature can be accessed remotely, allowing unauthorized access to files and directories. This could be exploited by attackers who have been made aware of it. To fix this, update the system's configuration settings to prevent unauthorized access.
Original title
A security vulnerability has been detected in code-projects Simple Food Ordering System up to 1.0. Affected by this vulnerability is an unknown functionality of the file /food/sql/food.sql of the c...
Original description
A security vulnerability has been detected in code-projects Simple Food Ordering System up to 1.0. Affected by this vulnerability is an unknown functionality of the file /food/sql/food.sql of the component Database Backup Handler. The manipulation leads to files or directories accessible. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. It is recommended to change the configuration settings.
nvd CVSS2.0
5.0
nvd CVSS3.1
5.3
nvd CVSS4.0
5.5
Vulnerability type
CWE-425
CWE-552
Published: 22 Mar 2026 · Updated: 22 Mar 2026 · First seen: 22 Mar 2026