MEDIUM 5.5 NVD
CVE-2026-116602
A vulnerability was detected in SourceCodester Online Food Ordering System 1.0. This issue affects the function unlink of the file admin/delete.php. Performing
A vulnerability was detected in SourceCodester Online Food Ordering System 1.0. This issue affects the function unlink of the file admin/delete.php. Performing a manipulation of the argument image_name results in path traversal. The attack is possible to be carried out remotely. The exploit is now public and may be used.
References
- https://github.com/CyberShailendra/sourcecodesterArbitraryFileDeletion-via-PathTraversal
- https://vuldb.com/cve/CVE-2026-116602
- https://vuldb.com/submit/1022943
- https://vuldb.com/vuln/426508
- https://vuldb.com/vuln/426508/cti
This medium severity vulnerability with a CVSS score of 5.5 was published on 2026-10-26 via NVD.
vulnfeed aggregates 18455 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.