CVE-2026-4533 : faille élevée carmelo simple food order system (CVSS 8.8)

A vulnerability was detected in code-projects Simple Food Ordering System 1.0. Affected by this issue is some unknown functionality of the file all-tickets.php. The manipulation of the argument Status results in sql injection. It is possible to launch the attack remotely. The exploit is now public and may be used.

Sévérité

Élevée (CVSS 8.8)

Vecteur CVSS

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitation active

Non signalée par la CISA

Publication

22 mars 2026

Dernière mise à jour

17 juin 2026

• carmelo simple food order system

• Fiche CVE-2026-4533 sur le NVD (NIST)
• code-projects.org/
• github.com/ahmadmarz10…
• vuldb.com/
• vuldb.com/
• vuldb.com/