PT-2021-16459

Name of the Vulnerable Software and Affected Versions: SourceCodester Ordering System version 1.0 Description: The issue allows attackers to execute arbitrary code via the file upload to "ordering/admin/products/edit.php". This is an arbitrary file upload vulnerability. Recommendations: For...

SQL Injection Vulnerability in Wechat Ordering System of Huitong Network

Shenzhen Huitong Network is a solution provider. Huitong Network WeChat Ordering System has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

UVI-2021-1000044 locking/qrwlock: Fix ordering in queued_write_lock_slowpath()

locking/qrwlock: Fix ordering in queuedwritelockslowpath This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.33 by commit...

UVI-2021-1000048 locking/qrwlock: Fix ordering in queued_write_lock_slowpath()

locking/qrwlock: Fix ordering in queuedwritelockslowpath This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.189 by commit...

PT-2021-28680

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.5 through v5.12.5 Description The issue concerns the xprtrdma component, specifically the cwnd update ordering. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-28797

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.5 through v5.10.37 Description The issue is related to the xprtrdma component, specifically concerning the cwnd update ordering. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2021-28515

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.15 through 5.11.16 Description The issue is related to the ordering in queued write lock slowpath in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-28516

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.189 Description The issue is related to the ordering in queued write lock slowpath in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior...

PT-2021-24521

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.15 through 5.11.16 Description: The issue is related to the ordering in queued write lock slowpath in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2021-24686

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.5 through v5.12.5 Description The issue concerns the xprtrdma component, specifically the cwnd update ordering. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-28512

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.33 Description The issue is related to the ordering in queued write lock slowpath in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-24803

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.5 through v5.10.37 Description: The issue is related to the xprtrdma component, specifically concerning the cwnd update ordering. The actual impact and attack plausibility have not yet been proven. Recommendations: Fo...

Gadget Works Online Ordering System 1.0 - 'Category' Persistent Cross-Site Scripting (XSS)

Exploit Title: Gadget Works Online Ordering System 1.0 - 'Category' Persistent Cross-Site Scripting XSS Date: 24-05-2021 Exploit Author: Vinay H C Vendor Homepage: https://www.sourcecodester.com/ Software Link:...

Gadget Works Online Ordering System 1.0 Cross Site Scripting

Exploit Title: Gadget Works Online Ordering System 1.0 - 'Category' Persistent Cross-Site Scripting XSS Date: 24-05-2021 Exploit Author: Vinay H C Vendor Homepage: https://www.sourcecodester.com/ Software Link:...

Gadget Works Online Ordering System 1.0 - (Category) Persistent Cross-Site Scripting Vulnerability

Exploit Title: Gadget Works Online Ordering System 1.0 - 'Category' Persistent Cross-Site Scripting XSS Exploit Author: Vinay H C Vendor Homepage: https://www.sourcecodester.com/ Software Link: https://www.sourcecodester.com/php/13093/gadget-works-online-ordering-system-phpmysqli.html Version: 1....

File upload vulnerability in responsive-ordering-system

responsive-ordering-system online ordering system with POS and kitchen-side user interface. A file upload vulnerability exists in responsive-ordering-system, which can be exploited by an attacker to gain control of the server...

Gadget Works Online Ordering System 1.0 SQL Injection / Code Execution

Exploit Title: Gadget works online ordering system - Authentication Bypass SQLi Date: 03/05/2021 Exploit Author: Richard Jones Vendor Homepage: https://www.sourcecodester.com/php/13093/gadget-works-online-ordering-system-phpmysqli.html Version: 1.0 Tested on: Windows 10 build 19041 + xampp 3.2.4...

Logic Flaw Vulnerability in Yazi Cloud Food Ordering System

Yazi cloud technology is a technology research and development innovation enterprise with rich experience in "Internet +" project diagnosis, planning, research and development, and landing as a whole. A logic flaw exists in the Yaziyun food ordering system, which can be exploited by attackers to...

Sea Cormorant Technology hospital food ordering applet has a flawed logic vulnerability

Guangzhou Hai Cormorant Network Technology Co., Ltd, referred to as: Hai Cormorant Technology, was founded on May 19, 2014, focusing on the healthcare industry, the main business includes the development and operation of intelligent mobile service platforms for WeChat Service Number, Alipay Life...

Online Ordering System SQL Injection (CVE-2021-28295)

An SQL injection vulnerability exists in Online Ordering System. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...