CVE-2026-4532CWE-425CWE-552

code-projects Simple Food Ordering System Database Backup food.sql file access

Medium · published March 22, 2026

CVSS v4.0
6.9
EPSS
1%
Percentile
52.5
In the wild
Unconfirmed
What it is

A security vulnerability has been detected in code-projects Simple Food Ordering System up to 1.0. Affected by this vulnerability is an unknown functionality of the file /food/sql/food.sql of the component Database Backup Handler. The manipulation leads to files or directories accessible. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. It is recommended to change the configuration settings.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P
EPSS
0.00697 · 52.5th percentile
Weaknesses
CWE-425 · Direct Request ('Forced Browsing'); CWE-552 · Files or Directories Accessible to External Parties
Published
2026-03-22T01:32Z
EPSS history
Timeline
  • 22 MAR 01:32Z
    code-projects Simple Food Ordering System Database Backup food.sql file access
    cvelistv5