A vulnerability described as critical has been identified in itsourcecode Online Frozen Foods Ordering System 1.0. This issue affects some unknown processing of the file /order_online.php. Executing a manipulation of the argument product_name can lead to sql injection.
This vulnerability is tracked as CVE-2026-1159. The attack can be launched remotely. Moreover, an exploit is present.
