CVE-2026-4839

HighCVSS 7.3/10Last modified Jun 17, 2026

Description

A vulnerability has been found in SourceCodester Food Ordering System 1.0. This affects an unknown function of the file /purchase.php of the component Parameter Handler. The manipulation of the argument custom leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 7.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-74CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Mar 26, 2026
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-483908.2Bridge is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vuCVE-2026-483918.2Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current useCVE-2026-483927.8Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.CVE-2026-483937.8Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.CVE-2026-483947.8Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.CVE-2026-483958.6Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current useCVE-2026-483968.6Bridge is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current uCVE-2026-483978.6Lightroom Classic is affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the contCVE-2026-483985.4Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipuCVE-2026-483997.5Adobe Campaign Classic (ACC) is affected by a Violation of Secure Design Principles vulnerability that could result in a Security feature byCVE-2026-48408.8A security flaw has been discovered in Netcore Power 15AX up to 3.0.0.6938. Affected by this issue is the function setTools of the file /binCVE-2026-484047.8Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the cu
CVE-2026-4839: High severity, CVSS 7.3 | Vulnix