6 matches found
PT-2022-21225
Name of the Vulnerable Software and Affected Versions Fast Food Ordering System version 1.0 Description The issue is related to a persistent cross-site scripting XSS vulnerability. This vulnerability is present in the /ffos/classes/Master.php?f=save category component. Recommendations For Fast Fo...
CVE-2022-32318: Improper Neutralization of Input During Web Page Generation
Fast Food Ordering System v1.0 was discovered to contain a persistent cross-site scripting XSS vulnerability via the component /ffos/classes/Master.php?f=savecategory...
PT-2022-21235
Name of the Vulnerable Software and Affected Versions Fast Food Ordering System version 1.0 Description The issue concerns SQL Injection via the "/ffos/classes/Master.php?f=delete category" API endpoint. This allows for potential manipulation of database queries. No information is provided about...
PT-2022-21233
Name of the Vulnerable Software and Affected Versions Fast Food Ordering System version 1.0 Description The issue concerns a SQL Injection vulnerability via the "/ffos/classes/Master.php?f=delete menu" API endpoint. This allows for potential unauthorized access and manipulation of database conten...
CVE-2022-32330: Improper Neutralization of Special Elements used in an SQL Command
Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/classes/Master.php?f=deletemenu...
CVE-2022-32332: Improper Neutralization of Special Elements used in an SQL Command
Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/classes/Master.php?f=deletecategory...