3628 matches found
CVE-2023-1301: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in SourceCodester Friendly Island Pizza Website and Ordering System 1.0. Affected by this issue is some unknown functionality of the file deleteorder.php of the component GET Parameter Handler. The manipulation of the argument id...
CVE-2023-27210
CVE-2023-27210 concerns Online Pizza Ordering System 1.0, where a SQL injection is reported via the id parameter in /admin/view_order.php. Multiple sources (NVD, Red Hat, CNNVD, CVE listing) consistently describe a SQLi issue in the admin view_order endpoint. The NVD entry assigns a severe CVSS v...
PT-2023-21007 · Unknown · Online Pizza Ordering System
Name of the Vulnerable Software and Affected Versions: Online Pizza Ordering System version 1.0 Description: A cross-site scripting XSS issue in the /php-opos/login.php endpoint of the Online Pizza Ordering System allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
Debian: Security Advisory (DLA-1434-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-0987
A vulnerability classified as problematic was found in SourceCodester Online Pizza Ordering System 1.0. This vulnerability affects unknown code of the file index.php?page=checkout. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed...
CVE-2023-0988
A vulnerability, which was classified as problematic, has been found in SourceCodester Online Pizza Ordering System 1.0. This issue affects some unknown processing of the file admin/ajax.php?action=saveuser. The manipulation leads to cross-site request forgery. The attack may be initiated remotel...
Cross site scripting
A vulnerability classified as problematic was found in SourceCodester Online Pizza Ordering System 1.0. This vulnerability affects unknown code of the file index.php?page=checkout. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed...
Cross site request forgery (csrf)
A vulnerability, which was classified as problematic, has been found in SourceCodester Online Pizza Ordering System 1.0. This issue affects some unknown processing of the file admin/ajax.php?action=saveuser. The manipulation leads to cross-site request forgery. The attack may be initiated remotel...
CVE-2023-0988 SourceCodester Online Pizza Ordering System cross-site request forgery
A vulnerability, which was classified as problematic, has been found in SourceCodester Online Pizza Ordering System 1.0. This issue affects some unknown processing of the file admin/ajax.php?action=saveuser. The manipulation leads to cross-site request forgery. The attack may be initiated remotel...
CVE-2023-0988
CVE-2023-0988 affects SourceCodester Online Pizza Ordering System v1.0, where the admin/ajax.php?action=save_user endpoint can be abused to perform CSRF. The issue arises from insufficient protection in processing the save_user request, enabling remote initiation of unauthorized actions without u...
CVE-2023-0988 SourceCodester Online Pizza Ordering System cross-site request forgery
A vulnerability, which was classified as problematic, has been found in SourceCodester Online Pizza Ordering System 1.0. This issue affects some unknown processing of the file admin/ajax.php?action=saveuser. The manipulation leads to cross-site request forgery. The attack may be initiated remotel...
CVE-2023-0987 SourceCodester Online Pizza Ordering System cross site scripting
A vulnerability classified as problematic was found in SourceCodester Online Pizza Ordering System 1.0. This vulnerability affects unknown code of the file index.php?page=checkout. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed...
CVE-2023-0987 SourceCodester Online Pizza Ordering System cross site scripting
A vulnerability classified as problematic was found in SourceCodester Online Pizza Ordering System 1.0. This vulnerability affects unknown code of the file index.php?page=checkout. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed...
CVE-2023-0987
The CVE-2023-0987 entry concerns SourceCodester Online Pizza Ordering System 1.0 with a cross-site scripting (XSS) vulnerability in index.php?page=checkout. The root cause is improper handling of input leading to XSS; the issue can be triggered remotely and has been publicly disclosed. Multiple c...
Online Pizza Ordering System 跨站脚本漏洞
Online Pizza Ordering System is an online pizza ordering system by Carlo Montero, an individual developer. A cross-site scripting vulnerability exists in SourceCodester Online Pizza Ordering System version 1.0. An attacker could exploit this vulnerability to conduct cross-site scripting attacks...
CVE-2023-0988: Cross-Site Request Forgery (CSRF)
A vulnerability, which was classified as problematic, has been found in SourceCodester Online Pizza Ordering System 1.0. This issue affects some unknown processing of the file admin/ajax.php?action=saveuser. The manipulation leads to cross-site request forgery. The attack may be initiated remotel...
CVE-2023-0987: Improper Neutralization of Input During Web Page Generation
A vulnerability classified as problematic was found in SourceCodester Online Pizza Ordering System 1.0. This vulnerability affects unknown code of the file index.php?page=checkout. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed...
Online Pizza Ordering System 跨站请求伪造漏洞
Online Pizza Ordering System is an online pizza ordering system from the individual developer Carlo Montero. A cross-site request forgery vulnerability exists in SourceCodester Online Pizza Ordering System version 1.0. An attacker could exploit this vulnerability to conduct a cross-site request...
K30164784: BIND vulnerability CVE-2017-3137
Security Advisory Description Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resource records could lead to a situation in which named would exit with an assertion failure when processing a response in which records occurred in an...
CVE-2023-0910
A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. This vulnerability affects unknown code of the file viewprod.php of the component GET Parameter Handler. The manipulation of the argument ID leads to sql injection. The attack can be...