SQL Injection Vulnerability in SililaWijesinghe Food Ordering System
CVE-2026-79804

6.9MEDIUM

Key Information:

Vendor: Sililawijesinghe
Status: Food Ordering System
Vendor: CVE Published:; 25 August 2026

🔔 Create Sililawijesinghe Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-79804?

A vulnerability exists within the SililaWijesinghe Food Ordering System relating to improper handling of user input in the /search.php file. An attacker can exploit this flaw by manipulating the search_box parameter, leading to potential SQL injection attacks. Such exploitation can allow unauthorized access to database information. This vulnerability is particularly concerning as the exploit has been publicly disclosed, which increases the likelihood of malicious actors leveraging it against unpatched systems. Despite repeated attempts to inform the vendor, there has been no official response or remedial action taken.

Affected Version(s)

Food Ordering System ba314e897e3365600461e5ea59432e39ceaa0fa5

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-79804 - Proof of Concept