CVE-2026-4470
itsourcecode Online Frozen Foods Ordering System admin_edit_menu.php sql injection
CVSS Score
4.7
EPSS Score
0.0%
EPSS Percentile
7th
A security flaw has been discovered in itsourcecode Online Frozen Foods Ordering System 1.0. Affected by this issue is some unknown functionality of the file /admin/admin_edit_menu.php. Performing a manipulation of the argument product_name results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks.
| CWE | CWE-89 CWE-74 |
| Vendor | itsourcecode |
| Product | online frozen foods ordering system |
| Published | Mar 20, 2026 |
| Last Updated | Mar 20, 2026 |
Stay Ahead of the Next One
Get instant alerts for itsourcecode online frozen foods ordering system
Be the first to know when new medium vulnerabilities affecting itsourcecode online frozen foods ordering system are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
itsourcecode / Online Frozen Foods Ordering System
1.0
References
Credits
🔍 OneChicken (VulDB User)