https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-3137.htmlhttps://patchthecve.com/cve/CVE-2026-3137.htmlWed, 17 Jun 2026 10:43:06 +0000MEDIUM 5.3: A security vulnerability has been detected in CodeAstro Food Ordering System 1.0. This affects an unknown function of the file food_ordering.exe. Such manipulation leads to stack-based buffer overflow. The attack can only be performed from a local environment. The exploit has been disclosed publiclyhttps://patchthecve.com/cve/CVE-2025-12931.htmlhttps://patchthecve.com/cve/CVE-2025-12931.htmlWed, 07 Oct 2026 21:10:00 +0000MEDIUM 6.3: A vulnerability was found in SourceCodester Food Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file /routers/edit-orders.php. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit has been madehttps://patchthecve.com/cve/CVE-2025-12930.htmlhttps://patchthecve.com/cve/CVE-2025-12930.htmlWed, 07 Oct 2026 21:10:00 +0000MEDIUM 6.3: A vulnerability has been found in SourceCodester Food Ordering System 1.0. Affected is an unknown function of the file /view-ticket.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may behttps://patchthecve.com/cve/CVE-2025-12315.htmlhttps://patchthecve.com/cve/CVE-2025-12315.htmlThu, 08 Oct 2026 11:10:00 +0000MEDIUM 4.7: A vulnerability was determined in code-projects Food Ordering System 1.0. This affects an unknown function of the file /admin/menu.php. Executing a manipulation of the argument itemPrice can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclosed and may bhttps://patchthecve.com/cve/CVE-2025-12314.htmlhttps://patchthecve.com/cve/CVE-2025-12314.htmlThu, 08 Oct 2026 11:10:00 +0000MEDIUM 4.7: A vulnerability was found in code-projects Food Ordering System 1.0. The impacted element is an unknown function of the file /admin/deleteitem.php. Performing a manipulation of the argument itemID results in sql injection. Remote exploitation of the attack is possible. The exploit has been made publhttps://patchthecve.com/cve/CVE-2025-6131.htmlhttps://patchthecve.com/cve/CVE-2025-6131.htmlWed, 17 Jun 2026 10:01:13 +0000LOW 2.4: A vulnerability, which was classified as problematic, was found in CodeAstro Food Ordering System 1.0. Affected is an unknown function of the file /admin/store/edit/ of the component POST Request Parameter Handler. The manipulation of the argument Restaurant Name/Address leads to cross site scriptin