Sql injection

FS Foodpanda Clone 1.0 has SQL Injection via the /food keywords parameter...

CVE-2017-17571

FS Foodpanda Clone 1.0 (PHP CodeIgniter) contains a SQL injection vulnerability in the /food keywords parameter. A remote attacker can inject SQL commands due to improper input handling in this parameter, as described in CNVD-2017-37402 and corroborated by NVD entries referencing the same vector....

PT-2017-14866

Name of the Vulnerable Software and Affected Versions FS Foodpanda Clone version 1.0 Description The issue is related to SQL Injection, which can be exploited via the /food API endpoint, specifically through the keywords parameter. Recommendations For FS Foodpanda Clone version 1.0, consider...

CVE-2017-17571: Improper Neutralization of Special Elements used in an SQL Command

FS Foodpanda Clone 1.0 has SQL Injection via the /food keywords parameter...