Lucene search
+L

1271 matches found

Cvelist
Cvelist
added 2026/02/25 12:32 a.m.40 views

CVE-2026-3137 CodeAstro Food Ordering System food_ordering.exe stack-based overflow

A security vulnerability has been detected in CodeAstro Food Ordering System 1.0. This affects an unknown function of the file foodordering.exe. Such manipulation leads to stack-based buffer overflow. The attack can only be performed from a local environment. The exploit has been disclosed public...

5.3CVSS0.00215EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2026/02/25 12:00 a.m.20 views

CodeAstro Food Ordering System 安全漏洞

The CodeAstro Food Ordering System is a food ordering system developed by CodeAstro Corporation. Version 1.0 of the CodeAstro Food Ordering System has a security vulnerability. This vulnerability stems from a stack buffer overflow in the foodordering.exe file, which may allow for the execution of...

7.8CVSS6.4AI score0.00215EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2026/02/25 12:00 a.m.17 views

PT-2026-21815

A security vulnerability has been detected in CodeAstro Food Ordering System 1.0. This affects an unknown function of the file food ordering.exe. Such manipulation leads to stack-based buffer overflow. The attack can only be performed from a local environment. The exploit has been disclosed...

5.3CVSS5.8AI score0.00215EPSS
SaveExploits1References6
OSV
OSV
added 2026/02/08 6:16 a.m.16 views

CVE-2026-2136

A flaw has been found in projectworlds Online Food Ordering System 1.0. This affects an unknown function of the file /view-ticket.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be use...

9.8CVSS5.8AI score0.00339EPSS
SaveExploits1References4
CVE
CVE
added 2026/02/08 5:02 a.m.36 views

CVE-2026-2136

CVE-2026-2136 affects projectworlds Online Food Ordering System v1.0. The vulnerability resides in an unknown function of /view-ticket.php where manipulating the ID parameter enables SQL injection, with remote exploitation demonstrated by published exploits. Multiple sources (NVD, Red Hat, CVE li...

9.8CVSS7.2AI score0.00339EPSS
SaveExploits1References4Affected Software1
attackerkb
attackerkb
added 2026/02/08 5:02 a.m.7 views

CVE-2026-2136

A flaw has been found in projectworlds Online Food Ordering System 1.0. This affects an unknown function of the file /view-ticket.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be use...

7.5CVSS7.2AI score0.00339EPSS
SaveExploits1References4Affected Software1
EUVD
EUVD
added 2026/02/08 5:02 a.m.19 views

EUVD-2026-5812

A flaw has been found in projectworlds Online Food Ordering System 1.0. This affects an unknown function of the file /view-ticket.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be use...

9.8CVSS7.2AI score0.00339EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2026/02/08 12:00 a.m.15 views

Projectworlds Online Food Ordering System SQL注入漏洞

Projectworlds Online Food Ordering System is an online meal ordering system developed by Projectworlds Company in India. Version 1.0 of the Projectworlds Online Food Ordering System has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the parameter ID in the...

9.8CVSS7.2AI score0.00339EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2026/02/08 12:00 a.m.18 views

PT-2026-6962

Name of the Vulnerable Software and Affected Versions projectworlds Online Food Ordering System version 1.0 Description A flaw exists in projectworlds Online Food Ordering System version 1.0, specifically within an unknown function of the /view-ticket.php file. Manipulation of the ID argument can...

9.8CVSS5.5AI score0.00339EPSS
SaveExploits1References10
RedhatCVE
RedhatCVE
added 2026/01/09 10:51 a.m.14 views

CVE-2022-42990

Food Ordering Management System v1.0 was discovered to contain a SQL injection vulnerability via the component /foms/all-orders.php?status=Cancelled%20by%20Customer...

7.2CVSS8.3AI score0.00843EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:58 a.m.19 views

CVE-2023-45346

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'role' parameter of the routers/user-router.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS8.3AI score0.007EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:58 a.m.19 views

CVE-2023-45342

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'phone' parameter of the routers/register-router.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS8.3AI score0.007EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:58 a.m.17 views

CVE-2023-45347

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'verified' parameter of the routers/user-router.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS8.3AI score0.007EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:58 a.m.21 views

CVE-2023-45343

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'ticketid' parameter of the routers/ticket-message.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS8.3AI score0.007EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:58 a.m.12 views

CVE-2023-45338

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter of the routers/add-ticket.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS8.8AI score0.007EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:58 a.m.21 views

CVE-2023-45325

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'address' parameter of the routers/add-users.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS8.3AI score0.007EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:58 a.m.18 views

CVE-2023-45334

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'status' parameter of the routers/edit-orders.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS8.3AI score0.007EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:58 a.m.22 views

CVE-2023-45345

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'deleted' parameter of the routers/user-router.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS8.3AI score0.007EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/12/25 2:32 a.m.6 views

CVE-2025-15074 itsourcecode Online Frozen Foods Ordering System customer_details.php sql injection

A vulnerability was identified in itsourcecode Online Frozen Foods Ordering System 1.0. This vulnerability affects unknown code of the file /customerdetails.php. Such manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be...

7.5CVSS7AI score0.00458EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2025/11/24 10:34 p.m.9 views

CVE-2025-13571

A vulnerability was determined in code-projects Simple Food Ordering System 1.0. Affected by this issue is some unknown functionality of the file /listorder.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been publicly...

8.8CVSS7.2AI score0.00308EPSS
SaveExploits1References1
Rows per page
Query Builder