Unrestricted File Upload Vulnerability in SourceCodester Food Ordering System
CVE-2026-127283

6.9MEDIUM

Key Information:

Vendor: Sourcecodester
Status: Food Ordering System
Vendor: CVE Published:; 13 November 2026

🔔 Create Sourcecodester Vulnerability Alert

What is CVE-2026-127283?

A vulnerability has been discovered in the SourceCodester Food Ordering System 1.0, specifically within the admin/update_food.php file of the Admin Image Handler component. This flaw allows an attacker to manipulate the 'cmd' argument, resulting in unrestricted file upload capabilities. The vulnerability can be exploited remotely, potentially enabling remote code execution. Publicly available exploits exacerbate the risk associated with this vulnerability, making it crucial for users of the system to address the issue promptly.