3909 matches found
Sql injection
Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/classes/Master.php?f=deletemenu...
Sql injection
Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/categories/managecategory.php?id=...
Sql injection
Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/menus/managemenu.php?id=...
Sql injection
Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/categories/viewcategory.php?id=...
CVE-2022-32335
CVE-2022-32335 affects the Fast Food Ordering System v1.0. The vulnerability is a SQL Injection in /ffos/admin/menus/manage_menu.php?id=, caused by lack of input validation for external SQL statements. Exploitation could allow attackers to access or manipulate database data. Documented impacts ar...
CVE-2022-32335
Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/menus/managemenu.php?id=...
CVE-2022-32334
CVE-2022-32334 affects Fast Food Ordering System v1.0. The vulnerability is an SQL injection in /ffos/admin/categories/manage_category.php?id= due to lack of input validation for the id parameter. Documented impact is SQL data access/exfiltration via the vulnerable parameter (high severity per CV...
CVE-2022-32334
Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/categories/managecategory.php?id=...
CVE-2022-32333
Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/sales/receipt.php?id=...
CVE-2022-32333
CVE-2022-32333 affects Fast Food Ordering System v1.0. The vulnerability is a SQL Injection in the admin receipt page, disclosed as /ffos/admin/sales/receipt.php?id=. The connected sources confirm a database query manipulation vector exposing Partial/High impact possibilities (per CVSS data, with...
CVE-2022-32332
Fast Food Ordering System v1.0 is vulnerable to SQL Injection in Master.php?f=delete_category due to missing input validation, enabling attackers to manipulate queries and potentially access or exfiltrate data. The sources do not provide a published patch/version for remediation or explicit explo...
CVE-2022-32332
Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/classes/Master.php?f=deletecategory...
CVE-2022-32331
CVE-2022-32331 affects Fast Food Ordering System v1.0. The issue is a SQL Injection in /ffos/admin/categories/view_category.php?id=, caused by unsanitized external input in the query. The CVE is corroborated by multiple sources (NVD, Red Hat, CNVD, CNVD-derived CNVD-2022-48950, and others) listin...
CVE-2022-32331
Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/categories/viewcategory.php?id=...
CVE-2022-32330
Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/classes/Master.php?f=deletemenu...
CVE-2022-32330
The CVE-2022-32330 entry concerns Fast Food Ordering System v1.0, where a SQL Injection vulnerability exists in Master.php?f=delete_menu. The connected documents clearly identify the affected application/file path and the underlying flaw (input for SQL statements not being validated), indicating ...
CVE-2022-32328
CVE-2022-32328 affects Fast Food Ordering System v1.0. The vulnerability is an arbitrary file deletion issue exploitable through the API endpoint /ffos/classes/Master.php?f=delete_img due to insufficient input/permission validation in the delete_img function. Impact statements in sources indicate...
CVE-2022-32336
Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/menus/viewmenu.php?id=...