3626 matches found
Online Food Ordering System 代码问题漏洞
Online Food Ordering System is an online food ordering system by Carlo Montero, an individual developer. A security vulnerability exists in Online Food Ordering System version v2.0, which originates from an arbitrary file upload vulnerability in the component /fos/admin/ajax.php, which can be...
PT-2023-19722
Name of the Vulnerable Software and Affected Versions Food Ordering System version 2.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the email parameter. Recommendations For Food Ordering System version 2.0, consider restricting the use...
CVE-2023-24646
An arbitrary file upload vulnerability in the component /fos/admin/ajax.php of Food Ordering System v2.0 allows attackers to execute arbitrary code via a crafted PHP file...
PT-2023-19721
Name of the Vulnerable Software and Affected Versions Food Ordering System version 2.0 Description The issue is related to an arbitrary file upload vulnerability in the component /fos/admin/ajax.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. There is no...
CVE-2023-24647: Improper Neutralization of Special Elements used in an SQL Command
Food Ordering System v2.0 was discovered to contain a SQL injection vulnerability via the email parameter...
CVE-2023-24646: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in the component /fos/admin/ajax.php of Food Ordering System v2.0 allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2023-24647
Food Ordering System v2.0 was discovered to contain a SQL injection vulnerability via the email parameter...
CVE-2023-24646
CVE-2023-24646 affects Food Ordering System v2.0; the vulnerability is an arbitrary file upload via /fos/admin/ajax.php that can lead to arbitrary code execution. The CVSS v3.1 base score is 9.8 (CRITICAL) with network access, no authentication, and high impact on confidentiality, integrity, and ...
Online Food Ordering System signup.php Cross-Site Scripting Vulnerability
A cross-site scripting vulnerability exists in Online Food Ordering System, an online food ordering system. The vulnerability stems from the lack of effective filtering and escaping of user-supplied data in the redirect parameter of the signup.php page, which can be exploited by attackers to caus...
Online Food Ordering System login.php Cross-Site Scripting Vulnerability
A cross-site scripting vulnerability exists in Online Food Ordering System, an online food ordering system. The vulnerability is caused by a lack of effective filtering and escaping of user-supplied data in the redirect parameter of the login.php page, which can be exploited by attackers to cause...
Online Food Ordering System SQL Injection Vulnerability (CNVD-2023-07974)
Online Food Ordering System is an online food ordering system. An SQL injection vulnerability exists in Online Food Ordering System, which stems from a lack of validation of externally entered SQL statements in the id parameter of the vieworder.php page. An attacker could use this vulnerability t...
Online Food Ordering System navbar.php Cross-Site Scripting Vulnerability
Online Food Ordering System is an online food ordering system. A cross-site scripting vulnerability exists in Online Food Ordering System, which is caused by the lack of effective filtering and escaping of user-supplied data in the page parameter of navbar.php page, which can be exploited to caus...
Online Food Ordering System index.php Cross-Site Scripting Vulnerability
Online Food Ordering System is an online food ordering system. A cross-site scripting vulnerability exists in Online Food Ordering System, which is caused by a lack of effective filtering and escaping of user-supplied data in the page parameter of index.php page, which can be exploited by attacke...
CVE-2023-24192
Online Food Ordering System v2 was discovered to contain a cross-site scripting XSS vulnerability via the redirect parameter in login.php...
CVE-2023-24191
Online Food Ordering System v2 was discovered to contain a cross-site scripting XSS vulnerability via the redirect parameter in signup.php...
CVE-2023-24195
Online Food Ordering System v2 was discovered to contain a cross-site scripting XSS vulnerability via the page parameter in index.php...
CVE-2023-24197
Online Food Ordering System v2 was discovered to contain a SQL injection vulnerability via the id parameter at vieworder.php...
CVE-2023-24194
Online Food Ordering System v2 was discovered to contain a cross-site scripting XSS vulnerability via the page parameter in navbar.php...
