2 matches found
CVE-2023-45347: Improper Neutralization of Special Elements used in an SQL Command
Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'verified' parameter of the routers/user-router.php resource does not validate the characters received and they are sent unfiltered to the database...
9.8CVSS8.2AI score0.007EPSS
SaveExploits1References2
anongreetingcards.com Cross Site Scripting vulnerability OBB-2909057
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
6.2AI score
SaveExploits0
20