← Retour aux CVEs
CVE-2026-5811
MEDIUM5.4
Description
A vulnerability was identified in SourceCodester Online Food Ordering System 1.0. Affected by this issue is the function save_product of the file /Actions.php of the component POST Parameter Handler. Such manipulation of the argument price leads to business logic errors. The attack may be performed from remote. The exploit is publicly available and might be used.
Details CVE
Score CVSS v3.15.4
SeveriteMEDIUM
Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Vecteur d'attaqueNETWORK
ComplexiteLOW
Privileges requisLOW
Interaction utilisateurNONE
Publie4/8/2026
Derniere modification4/13/2026
Sourcenvd
Observations honeypot0
Faiblesses (CWE)
CWE-840
References
https://github.com/meifukun/Web-Security-PoCs/blob/main/Online-Food-Ordering-System/BusinessLogic-Product-NegativePrice.md(cna@vuldb.com)
https://vuldb.com/submit/787678(cna@vuldb.com)
https://vuldb.com/vuln/356259(cna@vuldb.com)
https://vuldb.com/vuln/356259/cti(cna@vuldb.com)
https://www.sourcecodester.com/(cna@vuldb.com)
Correlations IOC
Aucune correlation enregistree
This product uses data from the NVD API but is not endorsed or certified by the NVD.