A vulnerability identified as problematic has been detected in code-projects Simple Food Ordering System up to 1.0. Affected by this vulnerability is an unknown functionality of the file /food/sql/food.sql of the component Database Backup Handler. The manipulation leads to files or directories accessible.

This vulnerability is traded as CVE-2026-4532. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

It is recommended to change the configuration settings.