CVE-2023-45341

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'price' parameter of the routers/menu-router.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-27073

A Cross-Site Request Forgery CSRF in Online Food Ordering System v1.0 allows attackers to change user details and credentials via a crafted POST request...

CVE-2023-24646

An arbitrary file upload vulnerability in the component /fos/admin/ajax.php of Food Ordering System v2.0 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2023-24195

Online Food Ordering System v2 was discovered to contain a cross-site scripting XSS vulnerability via the page parameter in index.php...

CVE-2023-0257

A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /fos/admin/index.php?page=menu of the component Menu Form. The manipulation of the argument Image with the input...

CVE-2023-24194

Online Food Ordering System v2 was discovered to contain a cross-site scripting XSS vulnerability via the page parameter in navbar.php...

CVE-2023-24192

Online Food Ordering System v2 was discovered to contain a cross-site scripting XSS vulnerability via the redirect parameter in login.php...

CVE-2023-24197

Online Food Ordering System v2 was discovered to contain a SQL injection vulnerability via the id parameter at vieworder.php...

CVE-2023-24647

Food Ordering System v2.0 was discovered to contain a SQL injection vulnerability via the email parameter...

CVE-2023-24191

Online Food Ordering System v2 was discovered to contain a cross-site scripting XSS vulnerability via the redirect parameter in signup.php...

CVE-2022-32334

Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/categories/managecategory.php?id=...

CVE-2022-43082

A cross-site scripting XSS vulnerability in /fastfood/purchase.php of Fast Food Ordering System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the customer parameter...

CVE-2022-43081

Fast Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the component /fastfood/purchase.php...

CVE-2022-32332

Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/classes/Master.php?f=deletecategory...

CVE-2022-32331

Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/categories/viewcategory.php?id=...

CVE-2022-32330

Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/classes/Master.php?f=deletemenu...

CVE-2022-32328

Fast Food Ordering System v1.0 is vulnerable to Delete any file. via /ffos/classes/Master.php?f=deleteimg...

CVE-2022-32333

Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/sales/receipt.php?id=...

CVE-2022-32335

Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/menus/managemenu.php?id=...

CVE-2022-3012

A vulnerability was found in oretnom23 Fast Food Ordering System. It has been rated as critical. Affected by this issue is some unknown functionality of the file ffos/admin/reports/index.php. The manipulation of the argument date leads to sql injection. The attack may be launched remotely. The...