Lucene search
+L

751 matches found

CNNVD
CNNVD
added 2023/11/02 12:0 a.m.5 views

Number withdrawn

Online Food Ordering System is an online food ordering system by the individual developer Carlo Montero. The CVE number has been withdrawn...

6.9AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/11/02 12:0 a.m.4 views

PT-2023-29506 · Unknown · Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: Online Food Ordering System version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the contact parameter of the "routers/add-users.php" resource does not validate the characters...

7.7AI score
SaveExploits0References6
CNNVD
CNNVD
added 2023/11/02 12:0 a.m.10 views

Online Food Ordering System SQL Injection Vulnerability

Online Food Ordering System is an online food ordering system developed by Carlo Montero. A SQL injection vulnerability exists in Online Food Ordering System v1.0, which is caused by insufficient filtering of the ticketid parameter on the routers/ticket-message.php page, resulting in a SQL...

9.8CVSS8AI score0.007EPSS
SaveExploits1References4
Prion
Prion
added 2023/08/24 12:15 p.m.15 views

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in GloriaFood Restaurant Menu – Food Ordering System – Table Reservation plugin = 2.3.6 versions...

5.8CVSS6AI score0.00385EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/08/24 11:21 a.m.47 views

CVE-2023-32516

CVE-2023-32516 corresponds to an unauthenticated reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin GloriaFood Restaurant Menu – Food Ordering System – Table Reservation . Affected versions are

7.1CVSS6AI score0.00385EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2023/07/10 12:0 a.m.46 views

Food Ordering System SQL Injection Vulnerability

Food Ordering System is a food ordering system. A SQL injection vulnerability exists in Food Ordering System v1.0 due to a lack of validation of the id parameter against externally entered SQL statements. An attacker can exploit this vulnerability to execute illegal SQL commands to steal sensitiv...

7.2CVSS8.3AI score0.00897EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2023/07/06 2:15 p.m.5 views

CVE-2023-36968

A SQL Injection vulnerability detected in Food Ordering System v1.0 allows attackers to run commands on the database by sending crafted SQL queries to the ID parameter...

7.2CVSS7.2AI score0.00897EPSS
SaveExploits1References3
NVD
NVD
added 2023/07/06 2:15 p.m.28 views

CVE-2023-36968

A SQL Injection vulnerability detected in Food Ordering System v1.0 allows attackers to run commands on the database by sending crafted SQL queries to the ID parameter...

7.2CVSS7.4AI score0.00897EPSS
SaveExploits1References2
OSV
OSV
added 2023/07/06 2:15 p.m.4 views

CVE-2023-36968

A SQL Injection vulnerability detected in Food Ordering System v1.0 allows attackers to run commands on the database by sending crafted SQL queries to the ID parameter...

7.2CVSS5.9AI score0.00897EPSS
SaveExploits1References2
Prion
Prion
added 2023/07/06 2:15 p.m.19 views

Sql injection

A SQL Injection vulnerability detected in Food Ordering System v1.0 allows attackers to run commands on the database by sending crafted SQL queries to the ID parameter...

5.8CVSS7.3AI score0.00897EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/07/06 12:0 a.m.9 views

CVE-2023-36968

A SQL Injection vulnerability detected in Food Ordering System v1.0 allows attackers to run commands on the database by sending crafted SQL queries to the ID parameter...

8.5AI score0.00897EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2023/07/06 12:0 a.m.36 views

CVE-2023-36968

A SQL Injection vulnerability detected in Food Ordering System v1.0 allows attackers to run commands on the database by sending crafted SQL queries to the ID parameter...

7.7AI score0.00897EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2023/07/06 12:0 a.m.5 views

PT-2023-25756 · Unknown · Food Ordering System

Name of the Vulnerable Software and Affected Versions: Food Ordering System version 1.0 Description: A SQL Injection issue allows attackers to execute commands on the database by sending crafted SQL queries to the ID parameter. Recommendations: For Food Ordering System version 1.0, avoid using th...

7.2CVSS7.4AI score0.00897EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/07/06 12:0 a.m.6 views

Food Ordering System SQL注入漏洞

Food Ordering System is a food ordering system. A SQL injection vulnerability exists in Food Ordering System v1.0 due to a lack of validation of the id parameter against externally entered SQL statements. An attacker can exploit this vulnerability to execute illegal SQL commands to steal sensitiv...

7.2CVSS8.2AI score0.00897EPSS
SaveExploits1References3
CVE
CVE
added 2023/07/06 12:0 a.m.135 views

CVE-2023-36968

CVE-2023-36968 affects the Food Ordering System v1.0. The root cause is lack of validation of the id parameter against SQL statements, enabling SQL injection. The vulnerability could allow an attacker to execute arbitrary SQL commands on the database (impact on confidentiality, integrity, and ava...

7.2CVSS7.4AI score0.00897EPSS
SaveExploits1References2Affected Software1
Patchstack
Patchstack
added 2023/05/10 12:0 a.m.22 views

WordPress Restaurant Menu – Food Ordering System – Table Reservation Plugin <= 2.3.6 is vulnerable to Cross Site Scripting (XSS)

Software Restaurant Menu – Food Ordering System – Table Reservation Type Plugin Vulnerable versions = 2.3.6 Fixed in 2.3.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-32516 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership...

7.1CVSS5.6AI score0.00385EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2023/05/09 1:15 p.m.5 views

CVE-2023-2594

A vulnerability, which was classified as critical, was found in SourceCodester Food Ordering Management System 1.0. Affected is an unknown function of the component Registration. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The...

9.8CVSS6.9AI score0.01009EPSS
SaveExploits0References2
NVD
NVD
added 2023/05/09 1:15 p.m.24 views

CVE-2023-2594

A vulnerability, which was classified as critical, was found in SourceCodester Food Ordering Management System 1.0. Affected is an unknown function of the component Registration. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The...

9.8CVSS8.1AI score0.01009EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/05/09 12:0 a.m.8 views

Food Ordering Management System SQL注入漏洞

Food Ordering Management System is a food ordering management system by Carlo Montero personal developer. It provides an online platform to order food from a restaurant or fast food chain. A SQL injection vulnerability exists in SourceCodester Food Ordering Management System version 1.0, which...

9.8CVSS7.5AI score0.01009EPSS
SaveExploits0References4
OSV
OSV
added 2023/05/05 2:15 a.m.5 views

CVE-2023-30122

An arbitrary file upload vulnerability in the component /admin/ajax.php?action=savemenu of Online Food Ordering System v2.0 allows attackers to execute arbitrary code via uploading a crafted PHP file...

9.8CVSS7.6AI score0.00983EPSS
SaveExploits1References1
Rows per page
Query Builder