SourceCodester Online Pizza Ordering System v1.0 is vulnerable to SQL Injection via the QTY parameter.