Lucene search
+L

3636 matches found

NVD
NVD
•added 2025/01/23 10:15 p.m.•40 views

CVE-2024-57328

A SQL Injection vulnerability exists in the login form of Online Food Ordering System v1.0. The vulnerability arises because the input fields username and password are not properly sanitized, allowing attackers to inject malicious SQL queries to bypass authentication and gain unauthorized access...

9.8CVSS0.00562EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/01/23 12:00 a.m.•44 views

CVE-2024-57328

A SQL Injection vulnerability exists in the login form of Online Food Ordering System v1.0. The vulnerability arises because the input fields username and password are not properly sanitized, allowing attackers to inject malicious SQL queries to bypass authentication and gain unauthorized access...

0.00562EPSS
SaveExploits1References1
CVE
CVE
•added 2025/01/23 12:00 a.m.•82 views

CVE-2024-57328

The CVE-2024-57328 entry describes a SQL Injection flaw in the login form of Online Food Ordering System v1.0. The issue arises from unsanitized username and password inputs, enabling attackers to inject SQL and bypass authentication to gain unauthorized access. Affected software/component: Onlin...

9.8CVSS8.6AI score0.00562EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2025/01/23 12:00 a.m.•16 views

PT-2025-3427 · Unknown · Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: Online Food Ordering System version 1.0 Description: A SQL Injection issue exists in the login form of the system. The issue arises because the input fields username and password are not properly sanitized, allowing attackers to inject...

9.8CVSS9.1AI score0.00562EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/23 12:00 a.m.•4 views

CVE-2024-57328: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability exists in the login form of Online Food Ordering System v1.0. The vulnerability arises because the input fields username and password are not properly sanitized, allowing attackers to inject malicious SQL queries to bypass authentication and gain unauthorized access...

9.8CVSS5.9AI score0.00562EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/01/23 12:00 a.m.•13 views

CVE-2024-57328

A SQL Injection vulnerability exists in the login form of Online Food Ordering System v1.0. The vulnerability arises because the input fields username and password are not properly sanitized, allowing attackers to inject malicious SQL queries to bypass authentication and gain unauthorized access...

10AI score0.00562EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/01/23 12:00 a.m.•18 views

Online Food Ordering System SQL注入漏洞

Online Food Ordering System is an online food ordering system from the personal developer Carlo Montero. A security vulnerability exists in Online Food Ordering System version 1.0, which arises from the input fields username and password not being properly cleaned, making it susceptible to SQL...

9.8CVSS7.9AI score0.00562EPSS
SaveExploits1References2
OSV
OSV
•added 2025/01/15 9:25 p.m.•20 views

GHSA-C873-WFHP-WX5M SP1 has missing verifier checks and fiat-shamir observations

In SP1’s STARK verifier, the prover provided chipordering is used to fetch the index of the chips that have preprocessed columns. Prior to v4.0.0, the validation that this chipordering correctly provides these indexes was missing. In v4.0.0, this was fixed by adding a check that the indexed chip’...

7AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/01/15 12:00 a.m.•12 views

PT-2025-5635 · Sp1 · Sp1

Name of the Vulnerable Software and Affected Versions: SP1 versions prior to 4.0.0 Description: The issue concerns the validation of the chip ordering provided by the prover in SP1's STARK verifier, which was missing prior to version 4.0.0. This allowed for potential incorrect indexing of chips...

7.3AI score
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/01/13 9:53 a.m.•27 views

CVE-2024-53689

In the Linux kernel, the following vulnerability has been resolved: block: Fix potential deadlock while freezing queue and acquiring sysfslock For storing a value to a queue attribute, the queueattrstore function first freezes the queue -qusagecounterio and then acquire -sysfslock. This seems not...

4.4CVSS6.8AI score
SaveExploits0References4
NVD
NVD
•added 2025/01/11 1:15 p.m.•56 views

CVE-2024-53689

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/01/11 12:00 a.m.•21 views

PT-2025-2981 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.12.0-10553-gb86545e02e8c Description: A potential deadlock issue has been identified in the Linux kernel. The queue attr store function first freezes the queue -q usage counterio and then acquires -sysfs lock...

5.5CVSS7.2AI score
SaveExploits0References10
NVD
NVD
•added 2024/12/31 3:15 p.m.•41 views

CVE-2024-13070

A vulnerability was found in CodeAstro Online Food Ordering System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/updateusers.php of the component Update User Page. The manipulation of the argument userupd leads to sql injectio...

8.8CVSS0.00545EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2024/12/31 2:31 p.m.•14 views

CVE-2024-13070 CodeAstro Online Food Ordering System Update User Page update_users.php sql injection

A vulnerability was found in CodeAstro Online Food Ordering System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/updateusers.php of the component Update User Page. The manipulation of the argument userupd leads to sql injectio...

6.5CVSS7.6AI score0.00545EPSS
SaveExploits1References5
CVE
CVE
•added 2024/12/31 2:31 p.m.•84 views

CVE-2024-13070

The CVE-2024-13070 entry concerns CodeAstro Online Food Ordering System 1.0. The vulnerability is described as a SQL injection in the Update User Page, specifically the /admin/update_users.php functionality, where manipulating the argument (user_upd or similar) enables remote exploitation. Multip...

8.8CVSS6.8AI score0.00545EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2024/12/31 2:31 p.m.•51 views

CVE-2024-13070 CodeAstro Online Food Ordering System Update User Page update_users.php sql injection

A vulnerability was found in CodeAstro Online Food Ordering System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/updateusers.php of the component Update User Page. The manipulation of the argument userupd leads to sql injectio...

6.5CVSS0.00545EPSS
SaveExploits1References5
NVD
NVD
•added 2024/12/31 9:15 a.m.•36 views

CVE-2024-13067

A vulnerability was found in CodeAstro Online Food Ordering System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/allusers.php of the component All Users Page. The manipulation leads to improper access controls. The attack may be initiated remotely...

6.9CVSS0.00846EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2024/12/31 9:00 a.m.•15 views

CVE-2024-13067 CodeAstro Online Food Ordering System All Users Page all_users.php access control

A vulnerability was found in CodeAstro Online Food Ordering System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/allusers.php of the component All Users Page. The manipulation leads to improper access controls. The attack may be initiated remotely...

6.9CVSS6.6AI score0.00846EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2024/12/31 9:00 a.m.•55 views

CVE-2024-13067 CodeAstro Online Food Ordering System All Users Page all_users.php access control

A vulnerability was found in CodeAstro Online Food Ordering System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/allusers.php of the component All Users Page. The manipulation leads to improper access controls. The attack may be initiated remotely...

6.9CVSS0.00846EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2024/12/31 12:00 a.m.•26 views

PT-2024-17912 · Unknown · Codeastro Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: CodeAstro Online Food Ordering System version 1.0 Description: A critical issue affects some unknown processing of the file /admin/all users.php of the component All Users Page, leading to improper access controls. The attack may be initiated...

6.9CVSS5.7AI score0.00846EPSS
SaveExploits1References10
Rows per page
Query Builder