Online Food Ordering System is an online food ordering system. An SQL injection vulnerability exists in Online Food Ordering System, which stems from a lack of validation of externally entered SQL statements in the id parameter of the view_order.php page. An attacker could use this vulnerability to execute illegal SQL commands to steal sensitive database data.