Dashboard / CVE-2026-123988

CVE-2026-123988

MEDIUM
MEDIUM Priority: 0.02 BB Relevance: 71/100
Published: 2026-11-07 Modified: 2026-11-09 First seen: 2026-11-07 Status: active

Attack Surface

Network Low Complexity No Auth No Interaction

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: None
S: X
AT: None
VC: Low
VI: None
VA: None

Description

A vulnerability has been found in SililaWijesinghe Food Ordering System up to ba314e897e3365600461e5ea59432e39ceaa0fa5. This issue affects some unknown processing of the file /Food-Ordering-System/admin/. Such manipulation leads to exposure of information through directory listing. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The vendor was contacted early about this disclosure but did not respond in any way.

Weakness Classification (2)

Affected Software (2)

VendorProductVersion
SililaWijesinghe Food Ordering System ba314e897e3365600461e5ea59432e39ceaa0fa5
SililaWijesinghe Food Ordering System ba314e897e3365600461e5ea59432e39ceaa0fa5

References & Advisories (5)

Bug Bounty Relevance

71 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.38%
Raw Score 0.003800
Percentile 32.2%
Date 2026-11-09

EPSS Trend

2026-11-09
0.00380
2026-11-08
0.00380

Intelligence Sources

mitre ref →
nvd ref →

External Links