What is the CVSS score of CVE-2026-30533?

CVE-2026-30533 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of PHP are affected by CVE-2026-30533?

Organizations using SourceCodester Online Food Ordering System face critical risk from CVE-2026-30533, a SQL injection vulnerability rated CVSS 9.8.

Is there a public PoC exploit available for CVE-2026-30533?

Yes, a public proof-of-concept exploit is available for CVE-2026-30533. Prioritise patching immediately. EPSS: 0.0%.

PHP CVE-2026-30533

EUVD-2026-16682 CRITICAL

SQL Injection (CWE-89)

2026-03-27 mitre

GHSA-gjcq-c94g-v7g2

PHP SQLi

9.8

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

PoC Detected

Mar 30, 2026 - 18:17 vuln.today

Public exploit code

EUVD ID Assigned

Mar 27, 2026 - 15:30 euvd

EUVD-2026-16682

Analysis Generated

Mar 27, 2026 - 15:30 vuln.today

CVE Published

Mar 27, 2026 - 00:00 nvd

CRITICAL 9.8

DescriptionNVD

A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the admin/manage_product.php file via the "id" parameter.

AnalysisAI

SQL injection in SourceCodester Online Food Ordering System v1.0 allows unauthenticated remote attackers to execute arbitrary SQL commands through the 'id' parameter in admin/manage_product.php, enabling unauthorized database access and data exfiltration. Publicly available exploit code exists for this vulnerability; however, no CVSS score, EPSS data, or CISA KEV confirmation is available to assess active exploitation at scale.

RemediationAI

Within 24 hours: Identify all affected systems running SourceCodester Online Food Ordering System and apply vendor patches immediately. Validate that input sanitization is in place for all user-controlled parameters.

Analysis

Detailed AI-generated intelligence summary covering attack vector, impact assessment, affected versions, remediation steps, and indicators of compromise.

POChttps://••••••••••.com/exploit

PATCHhttps://••••••••••.com/patch

ADVISORYhttps://••••••••••.com/advisory

Full analysis requires sign-in

Get intelligence summaries, risk assessment, exploit details, threat intel, and remediation guidance.

CVE-2026-30533 vulnerability details – vuln.today

Back

PHP CVE-2026-30533

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

RemediationAI

Full analysis requires sign-in

Share

External POC / Exploit Code