Lucene search
+L

3628 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/09 12:00 a.m.•5 views

CVE-2023-1301: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in SourceCodester Friendly Island Pizza Website and Ordering System 1.0. Affected by this issue is some unknown functionality of the file deleteorder.php of the component GET Parameter Handler. The manipulation of the argument id...

9.8CVSS5.5AI score0.00791EPSS
SaveExploits1References2
CVE
CVE
•added 2023/03/09 12:00 a.m.•120 views

CVE-2023-27210

CVE-2023-27210 concerns Online Pizza Ordering System 1.0, where a SQL injection is reported via the id parameter in /admin/view_order.php. Multiple sources (NVD, Red Hat, CNNVD, CVE listing) consistently describe a SQLi issue in the admin view_order endpoint. The NVD entry assigns a severe CVSS v...

9.8CVSS9.7AI score0.00872EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2023/03/09 12:00 a.m.•15 views

PT-2023-21007 · Unknown · Online Pizza Ordering System

Name of the Vulnerable Software and Affected Versions: Online Pizza Ordering System version 1.0 Description: A cross-site scripting XSS issue in the /php-opos/login.php endpoint of the Online Pizza Ordering System allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

6.1CVSS6AI score0.00476EPSS
SaveExploits1References5
OpenVAS
OpenVAS
•added 2023/03/08 12:00 a.m.•14 views

Debian: Security Advisory (DLA-1434-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References3
NVD
NVD
•added 2023/02/23 4:15 p.m.•31 views

CVE-2023-0987

A vulnerability classified as problematic was found in SourceCodester Online Pizza Ordering System 1.0. This vulnerability affects unknown code of the file index.php?page=checkout. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed...

5.4CVSS4.3AI score0.00584EPSS
SaveExploits1References3
NVD
NVD
•added 2023/02/23 4:15 p.m.•39 views

CVE-2023-0988

A vulnerability, which was classified as problematic, has been found in SourceCodester Online Pizza Ordering System 1.0. This issue affects some unknown processing of the file admin/ajax.php?action=saveuser. The manipulation leads to cross-site request forgery. The attack may be initiated remotel...

8.8CVSS5.8AI score0.00465EPSS
SaveExploits1References3
Prion
Prion
•added 2023/02/23 4:15 p.m.•27 views

Cross site scripting

A vulnerability classified as problematic was found in SourceCodester Online Pizza Ordering System 1.0. This vulnerability affects unknown code of the file index.php?page=checkout. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed...

4CVSS5.4AI score0.00584EPSS
SaveExploits1References3Affected Software1
Prion
Prion
•added 2023/02/23 4:15 p.m.•27 views

Cross site request forgery (csrf)

A vulnerability, which was classified as problematic, has been found in SourceCodester Online Pizza Ordering System 1.0. This issue affects some unknown processing of the file admin/ajax.php?action=saveuser. The manipulation leads to cross-site request forgery. The attack may be initiated remotel...

5CVSS8.7AI score0.00465EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
•added 2023/02/23 3:20 p.m.•14 views

CVE-2023-0988 SourceCodester Online Pizza Ordering System cross-site request forgery

A vulnerability, which was classified as problematic, has been found in SourceCodester Online Pizza Ordering System 1.0. This issue affects some unknown processing of the file admin/ajax.php?action=saveuser. The manipulation leads to cross-site request forgery. The attack may be initiated remotel...

5CVSS7.1AI score0.00465EPSS
SaveExploits1References3
CVE
CVE
•added 2023/02/23 3:20 p.m.•81 views

CVE-2023-0988

CVE-2023-0988 affects SourceCodester Online Pizza Ordering System v1.0, where the admin/ajax.php?action=save_user endpoint can be abused to perform CSRF. The issue arises from insufficient protection in processing the save_user request, enabling remote initiation of unauthorized actions without u...

8.8CVSS5.8AI score0.00465EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/02/23 3:20 p.m.•46 views

CVE-2023-0988 SourceCodester Online Pizza Ordering System cross-site request forgery

A vulnerability, which was classified as problematic, has been found in SourceCodester Online Pizza Ordering System 1.0. This issue affects some unknown processing of the file admin/ajax.php?action=saveuser. The manipulation leads to cross-site request forgery. The attack may be initiated remotel...

5CVSS8.9AI score0.00465EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2023/02/23 3:20 p.m.•43 views

CVE-2023-0987 SourceCodester Online Pizza Ordering System cross site scripting

A vulnerability classified as problematic was found in SourceCodester Online Pizza Ordering System 1.0. This vulnerability affects unknown code of the file index.php?page=checkout. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed...

4CVSS5.6AI score0.00584EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2023/02/23 3:20 p.m.•8 views

CVE-2023-0987 SourceCodester Online Pizza Ordering System cross site scripting

A vulnerability classified as problematic was found in SourceCodester Online Pizza Ordering System 1.0. This vulnerability affects unknown code of the file index.php?page=checkout. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed...

4CVSS5.3AI score0.00584EPSS
SaveExploits1References3
CVE
CVE
•added 2023/02/23 3:20 p.m.•65 views

CVE-2023-0987

The CVE-2023-0987 entry concerns SourceCodester Online Pizza Ordering System 1.0 with a cross-site scripting (XSS) vulnerability in index.php?page=checkout. The root cause is improper handling of input leading to XSS; the issue can be triggered remotely and has been publicly disclosed. Multiple c...

5.4CVSS4.5AI score0.00584EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
•added 2023/02/23 12:00 a.m.•15 views

Online Pizza Ordering System 跨站脚本漏洞

Online Pizza Ordering System is an online pizza ordering system by Carlo Montero, an individual developer. A cross-site scripting vulnerability exists in SourceCodester Online Pizza Ordering System version 1.0. An attacker could exploit this vulnerability to conduct cross-site scripting attacks...

5.4CVSS4.7AI score0.00584EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/23 12:00 a.m.•4 views

CVE-2023-0988: Cross-Site Request Forgery (CSRF)

A vulnerability, which was classified as problematic, has been found in SourceCodester Online Pizza Ordering System 1.0. This issue affects some unknown processing of the file admin/ajax.php?action=saveuser. The manipulation leads to cross-site request forgery. The attack may be initiated remotel...

8.8CVSS5.2AI score0.00465EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/23 12:00 a.m.•6 views

CVE-2023-0987: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in SourceCodester Online Pizza Ordering System 1.0. This vulnerability affects unknown code of the file index.php?page=checkout. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed...

5.4CVSS3.8AI score0.00584EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/02/23 12:00 a.m.•19 views

Online Pizza Ordering System 跨站请求伪造漏洞

Online Pizza Ordering System is an online pizza ordering system from the individual developer Carlo Montero. A cross-site request forgery vulnerability exists in SourceCodester Online Pizza Ordering System version 1.0. An attacker could exploit this vulnerability to conduct a cross-site request...

8.8CVSS5.6AI score0.00465EPSS
SaveExploits1References4
F5 Networks
F5 Networks
•added 2023/02/21 6:48 p.m.•48 views

K30164784: BIND vulnerability CVE-2017-3137

Security Advisory Description Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resource records could lead to a situation in which named would exit with an assertion failure when processing a response in which records occurred in an...

7.5CVSS7AI score0.08975EPSS
SaveExploits0
OSV
OSV
•added 2023/02/18 9:15 a.m.•22 views

CVE-2023-0910

A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. This vulnerability affects unknown code of the file viewprod.php of the component GET Parameter Handler. The manipulation of the argument ID leads to sql injection. The attack can be...

9.8CVSS6.6AI score0.00473EPSS
SaveExploits0References2
Rows per page
Query Builder