A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the admin/view_product.php file via the "id" parameter.

A SQL Injection vulnerability has been discovered in SourceCodester Online Food Ordering System version 1.0. The vulnerability is located in the admin/view_product.php file and can be exploited through the 'id' parameter. This allows attackers to potentially execute malicious SQL queries against the application's database. The vulnerability affects the administrative interface of the food ordering system, which could lead to unauthorized data access or manipulation. A proof-of-concept exploit is available on GitHub demonstrating the attack vector.