798 matches found
PT-2023-29522 · Unknown · Online Food Ordering System
Name of the Vulnerable Software and Affected Versions: Online Food Ordering System version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities in the Online Food Ordering System. Specifically, the role parameter of the routers/user-router.php resource does n...
Number withdrawn
Online Food Ordering System is an online food ordering system by the individual developer Carlo Montero. The CVE number has been withdrawn...
Number withdrawn
Online Food Ordering System is an online food ordering system by the individual developer Carlo Montero. The CVE number has been withdrawn...
PT-2023-29504 · Unknown · Online Food Ordering System
Name of the Vulnerable Software and Affected Versions: Online Food Ordering System version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the role parameter of the "routers/add-users.php" resource does not validate the characters received...
Online Food Ordering System SQL Injection Vulnerability
Online Food Ordering System is an online food ordering system by Carlo Montero, a personal developer. A SQL injection vulnerability exists in Online Food Ordering System v1.0, which stems from an insufficiently filtered password parameter on the routers/router.php page, resulting in an SQL...
Online Food Ordering System SQL Injection Vulnerability
Online Food Ordering System is an online food ordering system by Carlo Montero, a personal developer. A SQL injection vulnerability exists in Online Food Ordering System v1.0, which is caused by insufficient filtering of the role parameter on the routers/user-router.php page, resulting in a SQL...
PT-2023-29505 · Unknown · Online Food Ordering System
Name of the Vulnerable Software and Affected Versions: Online Food Ordering System version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. The username parameter of the "routers/add-users.php" resource does not validate, allowing for potential SQL...
PT-2023-29514 · Unknown · Online Food Ordering System
Name of the Vulnerable Software and Affected Versions: Online Food Ordering System version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the type parameter of the "routers/add-ticket.php" resource does not validate the characters receive...
Number withdrawn
Online Food Ordering System is an online food ordering system by the individual developer Carlo Montero. The CVE number has been withdrawn...
Number withdrawn
Online Food Ordering System is an online food ordering system by the individual developer Carlo Montero. The CVE number has been withdrawn...
Cross site scripting
Unauth. Reflected Cross-Site Scripting XSS vulnerability in GloriaFood Restaurant Menu – Food Ordering System – Table Reservation plugin = 2.3.6 versions...
CVE-2023-32516
CVE-2023-32516 corresponds to an unauthenticated reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin GloriaFood Restaurant Menu – Food Ordering System – Table Reservation . Affected versions are
Food Ordering System SQL Injection Vulnerability
Food Ordering System is a food ordering system. A SQL injection vulnerability exists in Food Ordering System v1.0 due to a lack of validation of the id parameter against externally entered SQL statements. An attacker can exploit this vulnerability to execute illegal SQL commands to steal sensitiv...
CVE-2023-36968
A SQL Injection vulnerability detected in Food Ordering System v1.0 allows attackers to run commands on the database by sending crafted SQL queries to the ID parameter...
CVE-2023-36968
A SQL Injection vulnerability detected in Food Ordering System v1.0 allows attackers to run commands on the database by sending crafted SQL queries to the ID parameter...
CVE-2023-36968
A SQL Injection vulnerability detected in Food Ordering System v1.0 allows attackers to run commands on the database by sending crafted SQL queries to the ID parameter...
Sql injection
A SQL Injection vulnerability detected in Food Ordering System v1.0 allows attackers to run commands on the database by sending crafted SQL queries to the ID parameter...
CVE-2023-36968
A SQL Injection vulnerability detected in Food Ordering System v1.0 allows attackers to run commands on the database by sending crafted SQL queries to the ID parameter...
CVE-2023-36968
CVE-2023-36968 affects the Food Ordering System v1.0. The root cause is lack of validation of the id parameter against SQL statements, enabling SQL injection. The vulnerability could allow an attacker to execute arbitrary SQL commands on the database (impact on confidentiality, integrity, and ava...