A weakness has been identified in itsourcecode Online Frozen Foods Ordering System 1.0. This issue affects some unknown processing of the file /order_online.php. Executing a manipulation of the argument product_name can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.
References
| Link | Resource |
|---|---|
| https://github.com/YouSeeYouOneDayDayDe/Nick_1321_vuls/issues/1 | Exploit Issue Tracking Mitigation Vendor Advisory |
| https://itsourcecode.com/ | Product |
| https://vuldb.com/?ctiid.341753 | Permissions Required VDB Entry |
| https://vuldb.com/?id.341753 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.736332 | Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
|
History
06 Feb 2026, 19:49
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Adonesevangelista
Adonesevangelista online Frozen Foods Ordering System |
|
| CPE | cpe:2.3:a:adonesevangelista:online_frozen_foods_ordering_system:1.0:*:*:*:*:*:*:* | |
| References | () https://github.com/YouSeeYouOneDayDayDe/Nick_1321_vuls/issues/1 - Exploit, Issue Tracking, Mitigation, Vendor Advisory | |
| References | () https://itsourcecode.com/ - Product | |
| References | () https://vuldb.com/?ctiid.341753 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.341753 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.736332 - Third Party Advisory, VDB Entry |
19 Jan 2026, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-01-19 15:15
Updated : 2026-02-06 19:49
NVD link : CVE-2026-1159
Mitre link : CVE-2026-1159
CVE.ORG link : CVE-2026-1159
JSON object : View
Products Affected
adonesevangelista
- online_frozen_foods_ordering_system