3623 matches found
CVE-2022-3714
A vulnerability classified as critical has been found in SourceCodester Online Medicine Ordering System 1.0. Affected is an unknown function of the file admin/?page=orders/vieworder. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. VDB-2123...
Cross site scripting
A vulnerability classified as problematic was found in SourceCodester Online Medicine Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file /omos/admin/?page=user/list. The manipulation of the argument First Name/Middle Name/Last Name leads to cross site...
Sql injection
A vulnerability classified as critical has been found in SourceCodester Online Medicine Ordering System 1.0. Affected is an unknown function of the file admin/?page=orders/vieworder. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. VDB-2123...
Online Medicine Ordering System 安全漏洞
Online Medicine Ordering System is an online medicine ordering system developed by Carlo Montero. A security vulnerability exists in version 1.0 of the Online Medicine Ordering System due to an unknown function in its /omos/admin/?page=user/list file that operates on the parameters First...
CVE-2022-3716
CVE-2022-3716 affects SourceCodester Online Medicine Ordering System 1.0. The vulnerability is in the unknown functionality behind /omos/admin/?page=user/list, where manipulation of the First Name/Middle Name/Last Name parameters leads to cross-site scripting. It can be exploited remotely. Docume...
CVE-2022-3714
CVE-2022-3714 affects SourceCodester Online Medicine Ordering System 1.0. The vulnerability is a SQL injection in an unknown function of the file admin/?page=orders/view_order, triggered by manipulating the id parameter, allowing remote exploitation. Documents consistently describe this issue as ...
CVE-2022-3716: Improper Neutralization
A vulnerability classified as problematic was found in SourceCodester Online Medicine Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file /omos/admin/?page=user/list. The manipulation of the argument First Name/Middle Name/Last Name leads to cross site...
CVE-2022-3714: Improper Neutralization
A vulnerability classified as critical has been found in SourceCodester Online Medicine Ordering System 1.0. Affected is an unknown function of the file admin/?page=orders/vieworder. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. VDB-2123...
PT-2022-23834 · Unknown · Sourcecodester Online Medicine Ordering System
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Medicine Ordering System version 1.0 Description: A critical issue has been found in the system, affecting an unknown function of the file "admin/?page=orders/view order". The manipulation of the id argument leads to SQL...
Security Bulletin: There is vulnerability in Apache Log4j used by Content Manager OnDemand z/OS. Content Manager OnDemand z/OS has addressed the applicable CVE [CVE-2021-44228]
Summary There is vulnerability in Apache Log4j used by Content Manager OnDemand z/OS. Content Manager OnDemand z/OS has addressed the applicable CVE. CVE-2021-44228 Vulnerability Details CVEID:CVE-2021-44228 DESCRIPTION: Apache Log4j could allow a remote attacker to execute arbitrary code on the...
The vulnerability of the router.php implementation of the POST Parameter Handler in the Food Ordering Management System allows a perpetrator to execute arbitrary SQL code.
The vulnerability in the implementation of the router.php script of the POST Parameter Handler component of the Food Ordering Management System’s control system is related to insufficient cleaning of special elements during the processing of the user name parameter. Exploiting this vulnerability...
Food Ordering Management System SQL Injection Vulnerability
Food Ordering Management System is a food ordering management system from Carlo Montero's personal developer. The Food Ordering Management System is vulnerable to SQL injection, which stems from the lack of validation of external input SQL statements by username, and can be exploited by attackers...
CVE-2022-3332
A vulnerability classified as critical has been found in SourceCodester Food Ordering Management System. This affects an unknown part of the file router.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection. It is possible to initiate the...
Sql injection
A vulnerability classified as critical has been found in SourceCodester Food Ordering Management System. This affects an unknown part of the file router.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection. It is possible to initiate the...
CVE-2022-3332
SourceCodester Food Ordering Management System contains a SQL injection vulnerability in the router.php file (POST Parameter Handler). The issue stems from unsafely handling the username parameter, allowing remote attackers to manipulate SQL queries. The vulnerability is publicly disclosed and ca...
CVE-2022-3332 SourceCodester Food Ordering Management System POST Parameter router.php sql injection
A vulnerability classified as critical has been found in SourceCodester Food Ordering Management System. This affects an unknown part of the file router.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection. It is possible to initiate the...
CVE-2022-3332: Improper Neutralization
A vulnerability classified as critical has been found in SourceCodester Food Ordering Management System. This affects an unknown part of the file router.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection. It is possible to initiate the...
SourceCodester Food Ordering Management System 安全漏洞
Food Ordering Management System is a food ordering management system from Carlo Montero's personal developer. The Food Ordering Management System is vulnerable to SQL injection, which stems from the lack of validation of external input SQL statements by username, and can be exploited by attackers...
