CVE-2026-4900
Medium · 5.3CVSS
5.3
EPSS
0.5%
Published
Mar 26, 2026
CISA due date
—
The record
A weakness has been identified in code-projects Online Food Ordering System 1.0. This affects an unknown part of the file /dbfood/localhost.sql. This manipulation causes files or directories accessible. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks. It is advisable to modify the configuration settings.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-14953 A low-privileged remote attacker can enumerate all configured users and identify which… CWE-425
- CVE-2026-76799 A weakness has been identified in code-projects Login Registration System 1.0. CWE-425
- CVE-2026-19903 A vulnerability has been found in SourceCodester Online Clothing Store 1.0. CWE-425
- CVE-2026-21760 HCL DevOps Loop is affected by an Unauthorized Access to Admin Functionality (Forced… CWE-425
- CVE-2026-10521 An high privileged remote attacker can access a hidden configuration method, that should… CWE-425
- CVE-2026-9610 IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9… CWE-425
- CVE-2026-34028 The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, exposes… CWE-425
- CVE-2026-11986 A flaw was found in the admin-ui-ext component of Keycloak, which provides extended… CWE-425