CVE-2026-2136 | projectworlds Online Food Ordering System 1.0 /view-ticket.php ID sql injection

A vulnerability was found in projectworlds Online Food Ordering System 1.0. It has been declared as critical. This affects an unknown function of the file /view-ticket.php. Executing a manipulation of the argument ID can lead to sql injection.

This vulnerability is registered as CVE-2026-2136. It is possible to launch the attack remotely. Furthermore, an exploit is available.