Lucene search
+L

3623 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/14 12:00 a.m.•8 views

CVE-2022-32318: Improper Neutralization of Input During Web Page Generation

Fast Food Ordering System v1.0 was discovered to contain a persistent cross-site scripting XSS vulnerability via the component /ffos/classes/Master.php?f=savecategory...

5.4CVSS5.8AI score0.0053EPSS
SaveExploits0References2
Code423n4
Code423n4
•added 2022/07/02 12:00 a.m.•18 views

Unused deadline checker modifier may result in user fund loss due to unexpect transaction ordering (MEV)

Lines of code Vulne...

7AI score
SaveExploits0
CNVD
CNVD
•added 2022/06/21 12:00 a.m.•52 views

Online Ordering System SQL Injection Vulnerability (CNVD-2022-55712)

Online Ordering System is a multi-store ordering system that can be used by any small business.An SQL injection vulnerability exists in Online Ordering System version v2.3.2, which originates from /ordering/admin/inventory/index.php?view=edit & id=Lack of validation of external input SQL statemen...

9.8CVSS5AI score0.01079EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/06/21 12:00 a.m.•56 views

Online Ordering System SQL Injection Vulnerability (CNVD-2022-55711)

Online Ordering System is a multi-store ordering system that can be used by any small business.Online Ordering System version v2.3.2 is vulnerable to SQL injection, which originates from /ordering/index.php?q=category&search=Lack of validation of external input SQL statement validation, an attack...

9.8CVSS5AI score0.01079EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/06/21 12:00 a.m.•55 views

Online Ordering System SQL Injection Vulnerability (CNVD-2022-55713)

Online Ordering System is a multi-store ordering system that can be used by any small business. an SQL injection vulnerability exists in Online Ordering System version v2.3.2, which originates from /ordering/admin/store/index.php?view=edit&id= Lack of validation of external input SQL statements c...

9.8CVSS4.4AI score0.01079EPSS
SaveExploits1References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/06/20 8:10 p.m.•11 views

Malicious code in azure-arm-marketplaceordering-samples-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf59f23b5bccf7ec27582deef1e3ac73b9c2bb5dd0285fc2ea68303025f4e110 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/06/20 8:10 p.m.•12 views

Malicious code in azure-arm-marketplaceordering-samples-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b4a2463f36d3e9bd24f3d0ca72ceee3983872b1b555f31a9dc698e1d8c23d8c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
CNVD
CNVD
•added 2022/06/20 12:00 a.m.•143 views

Fast Food Ordering System SQL Injection Vulnerability (CNVD-2022-48948)

Fast Food Ordering System is a fast food ordering system from Carlo Montero's personal developer. version 1.0 of Fast Food Ordering System is vulnerable to SQL injection, which originates from /ffos/classes/Master.php?f=deletemenu The page lacks validation for external input SQL statements, which...

7.2CVSS4.9AI score0.00956EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/06/20 12:00 a.m.•135 views

Fast Food Ordering System SQL Injection Vulnerability (CNVD-2022-48947)

Fast Food Ordering System, a fast food ordering system from Carlo Montero's personal developer, is vulnerable to a SQL injection vulnerability in version 1.0 of Fast Food Ordering System, which originates in /ffos/classes/Master.php?f=delete category page lacks validation of externally entered SQ...

7.2CVSS4.7AI score0.00956EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/06/20 12:00 a.m.•170 views

Fast Food Ordering System SQL Injection Vulnerability (CNVD-2022-48945)

Fast Food Ordering System is a fast food ordering system from Carlo Montero's personal developer. version 1.0 of Fast Food Ordering System is vulnerable to SQL injection, which originates from /ffos/admin/categories/managecategory .php?id=The page lacks validation for external input SQL statement...

7.2CVSS4.7AI score0.00956EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/06/20 12:00 a.m.•137 views

Fast Food Ordering System SQL Injection Vulnerability (CNVD-2022-48946)

Fast Food Ordering System is a fast food ordering system from Carlo Montero's personal developer. version 1.0 of Fast Food Ordering System is vulnerable to SQL injection, which originates from /ffos/admin/menus/managemenu.php?id= The page lacks validation for external input SQL statements, which...

7.2CVSS4.9AI score0.00956EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/06/20 12:00 a.m.•150 views

Fast Food Ordering System SQL Injection Vulnerability (CNVD-2022-48949)

Fast Food Ordering System is a fast food ordering system from Carlo Montero's personal developer. version 1.0 of Fast Food Ordering System is vulnerable to SQL injection, which originates from /ffos/admin/sales/receipt.php?id=page missing validation of external input SQL statements, which can be...

7.2CVSS4.7AI score0.00956EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/06/20 12:00 a.m.•131 views

Fast Food Ordering System SQL注入漏洞

Fast Food Ordering System is a fast food ordering system from Carlo Montero's personal developer. version 1.0 of Fast Food Ordering System is vulnerable to SQL injection, which originates from /ffos/admin/menus/viewmenu.php?id=page Lack of validation of external input SQL statements can be...

9.8CVSS4.9AI score0.01079EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/06/20 12:00 a.m.•151 views

Fast Food Ordering System Arbitrary File Deletion Vulnerability

Fast Food Ordering System is a fast food ordering system from Carlo Montero's personal developer. version 1.0 of Fast Food Ordering System is vulnerable to an arbitrary file deletion vulnerability, which originates in /ffos/classes/Master.php?f=deleteimg page lacks valid validation and can be...

9.1CVSS3.9AI score0.01206EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/06/20 12:00 a.m.•128 views

Fast Food Ordering System SQL Injection Vulnerability (CNVD-2022-48950)

Fast Food Ordering System, a fast food ordering system from Carlo Montero's personal developer, is vulnerable to a SQL injection vulnerability in version 1.0 of Fast Food Ordering System, which originates in /ffos/admin/categories/viewcategory. php?id=The page lacks validation for external input...

7.2CVSS4.4AI score0.00956EPSS
SaveExploits1References1
Code423n4
Code423n4
•added 2022/06/19 12:00 a.m.•11 views

Swaps done internally will be not be possible

Lines of code Vulnerability details Affected functionsthat rely on swapAsset are: swapAsset facilitates two swaps, either using the internal or external pool. But if an internal pool exists, a swap will be unsuccessful because the call to s.swapStoragescanonicalId.swapInternal takes two incorrect...

7AI score
SaveExploits0
attackerkb
attackerkb
•added 2022/06/17 2:15 p.m.•8 views

CVE-2022-31355

Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/index.php?q=category&search=...

9.8CVSS7.4AI score0.01079EPSS
SaveExploits1References2
OSV
OSV
•added 2022/06/17 2:15 p.m.•13 views

CVE-2022-31356

Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/store/index.php?view=edit&id=...

9.8CVSS7.3AI score0.01079EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/06/17 2:15 p.m.•17 views

CVE-2022-31357

Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/inventory/index.php?view=edit&id=...

9.8CVSS7.4AI score0.01079EPSS
SaveExploits1References2
NVD
NVD
•added 2022/06/17 2:15 p.m.•29 views

CVE-2022-31357

Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/inventory/index.php?view=edit&id=...

9.8CVSS0.01079EPSS
SaveExploits1References1
Rows per page
Query Builder