<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 02 Oct 2026 05:51:34 +0000</lastBuildDate>
    <item>
      <title>CVE-2026-90854 — SourceCodester/katojkalemba Online Food Ordering System category-foods.php sql injection</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-90854</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; SourceCodester Online Food Ordering System, katojkalemba Online Food Ordering System&lt;/p&gt;
&lt;p&gt;A security flaw has been discovered in SourceCodester/katojkalemba Online Food Ordering System 1.0. The impacted element is an unknown function of the file /web/category-foods.php. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; SourceCodester Online Food Ordering System, katojkalemba Online Food Ordering System&lt;/p&gt;
&lt;p&gt;A security flaw has been discovered in SourceCodester/katojkalemba Online Food Ordering System 1.0. The impacted element is an unknown function of the file /web/category-foods.php. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-90854</guid>
    </item>
  </channel>
</rss>
