CVE-2026-116602

EUVD-2026-110507
A vulnerability was detected in SourceCodester Online Food Ordering System 1.0. This issue affects the function unlink of the file admin/delete.php. Performing a manipulation of the argument image_name results in path traversal. The attack is possible to be carried out remotely. The exploit is now public and may be used.
Path Traversal
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 40.41%
Common Weakness Enumeration
References
https://github.com/CyberShailendra/sourcecodesterArbitraryFileDeletion-via-PathTraversal
https://vuldb.com/cve/CVE-2026-116602
https://vuldb.com/submit/1022943
https://vuldb.com/vuln/426508
https://vuldb.com/vuln/426508/cti
https://www.sourcecodester.com/