CVE-2023-45341

CVE-2023-45341 affects Online Food Ordering System v1.0. The vulnerability is multiple unauthenticated SQL injections in the routers/menu-router.php resource, triggered by the unvalidated and unfiltered characters in the “*_price” parameter that are sent to the database. Root cause: lack of input...

CVE-2023-45341 Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'price' parameter of the routers/menu-router.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-45344 Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'balance' parameter of the routers/user-router.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-45344

The CVE-2023-45344 entry concerns Online Food Ordering System v1.0, which is vulnerable to multiple unauthenticated SQL injection flaws. The vulnerability specifically affects the routers/user-router.php resource, where the *_balance parameter is not properly validated, allowing unfiltered input ...

CVE-2023-45342

CVE-2023-45342 affects Online Food Ordering System v1.0 and describes multiple unauthenticated SQL injection vulnerabilities in routers/register-router.php, caused by insufficient validation of the phone parameter, which is sent unfiltered to the database. Red Hat’s advisory mirrors the descripti...

CVE-2023-45340

CVE-2023-45340 affects Online Food Ordering System v1.0; the routers/details-router.php resource’s phone parameter is vulnerable to unauthenticated SQL Injection due to unvalidated input sent to the database. Public-facing CVSS v3.1 shows a CRITICAL (9.8) score with network access, low attack com...

CVE-2023-45339

PT-2023-29514 details an unauthenticated SQL injection in Online Food Ordering System v1.0, exposed via routers/add-ticket.php (parameter: type). Unfiltered input is passed to the database, enabling potential injection. No fix/version is provided; recommended input validation/filtering of the typ...

CVE-2023-45337

Affected software: Online Food Ordering System, version 1.0. Vulnerability: multiple unauthenticated SQL injection flaws in routers/router.php caused by unvalidated username input, enabling unfiltered data to reach the database. Impact (as per sources): potential SQL injection; no exploitation de...

CVE-2023-45336

CVE-2023-45336 affects Online Food Ordering System v1.0. The vulnerability consists of multiple unauthenticated SQL injection flaws in the routers/router.php password parameter, which does not validate input and sends unfiltered data to the database. Impact is reported as high across confidential...

CVE-2023-45336 Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'password' parameter of the routers/router.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-45335

Consolidated detail from connected records shows a concrete vulnerability in Online Food Ordering System version 1.0: an unauthenticated SQL injection in the routers/edit-orders.php id parameter due to lack of input validation. Potential impact includes data exposure or manipulation; exploiting r...

CVE-2023-45334

Affected software: Online Food Ordering System v1.0. Vulnerability: multiple unauthenticated SQL injection flaws in the routers/edit-orders.php resource, caused by inadequate validation/filtration of the status parameter. Impact (as stated): attacker can send unfiltered input to the database; CVS...

CVE-2023-45332

The CVE-2023-45332 entry is supported by connected data describing an unauthenticated SQL injection in Online Food Ordering System v1.0, exploitable via the routers/add-users.php deleted parameter without input validation. Root cause: unfiltered input is passed to the database, enabling potential...

CVE-2023-45331

The connected PT-2023-29506 entry documents a concrete vulnerability in the Online Food Ordering System (version 1.0). The issue is unauthenticated SQL injection in the routers/add-users.php endpoint via the contact parameter, which is not properly validated and sends unfiltered input to the data...

CVE-2023-45330

Concretely affected: Online Food Ordering System version 1.0. The issue is unauthenticated SQL Injection in the routers/add-users.php endpoint, caused by improper validation of the username parameter. This vulnerability is described as multiple SQLi vulnerabilities, with risk of unauthorized DB a...

CVE-2023-45329

Affected software: Online Food Ordering System, version 1.0. Vulnerability: unauthenticated SQL injection in routers/add-users.php; the unvalidated role parameter is sent to the database. Impact: potential for unauthorized data access/modification as described. Exploitation details: not provided ...

CVE-2023-45328

CVE-2023-45328 is rejected/not used and does not represent an active vulnerability entry.

CVE-2023-45327

CVE-2023-45327 is rejected/withdrawn by its CVE Numbering Authority and does not represent an active vulnerability entry.

CVE-2023-45326

CVE-2023-45326 entry is rejected/not used as stated in the Initial Description.

CVE-2023-45325 Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'address' parameter of the routers/add-users.php resource does not validate the characters received and they are sent unfiltered to the database...