https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-5019.htmlhttps://patchthecve.com/cve/CVE-2026-5019.htmlWed, 17 Jun 2026 10:58:16 +0000HIGH 7.3: A security vulnerability has been detected in code-projects Simple Food Order System 1.0. Affected by this vulnerability is an unknown functionality of the file all-orders.php of the component Parameter Handler. The manipulation of the argument Status leads to sql injection. The attack may be initiahttps://patchthecve.com/cve/CVE-2026-5018.htmlhttps://patchthecve.com/cve/CVE-2026-5018.htmlWed, 17 Jun 2026 10:58:16 +0000HIGH 7.3: A weakness has been identified in code-projects Simple Food Order System 1.0. Affected is an unknown function of the file register-router.php of the component Parameter Handler. Executing a manipulation of the argument Name can lead to sql injection. The attack can be launched remotely. The exploit https://patchthecve.com/cve/CVE-2026-5017.htmlhttps://patchthecve.com/cve/CVE-2026-5017.htmlWed, 17 Jun 2026 10:58:16 +0000HIGH 7.3: A security flaw has been discovered in code-projects Simple Food Order System 1.0. This impacts an unknown function of the file /all-tickets.php of the component Parameter Handler. Performing a manipulation of the argument Status results in sql injection. The attack can be initiated remotely. The exhttps://patchthecve.com/cve/CVE-2026-4533.htmlhttps://patchthecve.com/cve/CVE-2026-4533.htmlWed, 17 Jun 2026 10:56:45 +0000MEDIUM 6.3: A vulnerability was detected in code-projects Simple Food Ordering System 1.0. Affected by this issue is some unknown functionality of the file all-tickets.php. The manipulation of the argument Status results in sql injection. It is possible to launch the attack remotely. The exploit is now public ahttps://patchthecve.com/cve/CVE-2026-4532.htmlhttps://patchthecve.com/cve/CVE-2026-4532.htmlWed, 17 Jun 2026 10:56:45 +0000MEDIUM 5.3: A security vulnerability has been detected in code-projects Simple Food Ordering System up to 1.0. Affected by this vulnerability is an unknown functionality of the file /food/sql/food.sql of the component Database Backup Handler. The manipulation leads to files or directories accessible. It is posshttps://patchthecve.com/cve/CVE-2026-4319.htmlhttps://patchthecve.com/cve/CVE-2026-4319.htmlWed, 17 Jun 2026 10:56:24 +0000HIGH 7.3: A vulnerability was identified in code-projects Simple Food Order System 1.0. Affected by this vulnerability is an unknown functionality of the file /routers/add-item.php. Such manipulation of the argument price leads to sql injection. The attack can be launched remotely. The exploit is publicly ava