CVE-2026-8231

MediumCVSS 6.3

Published: 10/05/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.20%

10th percentile - higher than 10% of all known CVEs

Summary

SQL Injection vulnerability in CodeAstro Online Catering Ordering System 1.0. Manipulation of the ID argument in /deleteorder.php allows remote SQL injection.

Risk Assessment

An attacker can read, modify, or delete database data, leading to loss of confidentiality and integrity.

Recommendation

Apply input filtering and use parameterized queries. Update the system if a patch is available.

Original NVD description (English source)

A vulnerability has been found in CodeAstro Online Catering Ordering System 1.0. This affects an unknown function of the file /deleteorder.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.