A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in admin/manage_category.php via the "id" parameter.

A SQL Injection vulnerability has been identified in SourceCodester Online Food Ordering System version 1.0. The vulnerability exists in the admin/manage_category.php file and can be exploited via the 'id' parameter. This allows attackers to potentially execute arbitrary SQL commands against the application's database. The vulnerability affects the administrative interface of the food ordering system, which could lead to unauthorized access to sensitive data or system compromise. A proof-of-concept exploit has been published on GitHub demonstrating the vulnerability.