751 matches found
Online Food Ordering System 2.0 SQL Injection Vulnerability
Exploit Title: Online Food Ordering System v2 - Sql Injection Time-Based Blind Exploit Author: Anıl Kızıltan Vendor Homepage: https://www.sourcecodester.com/php/16022/online-food-ordering-system-v2-using-php8-and-mysql-free-source-code.html Software Link:...
Online Food Ordering System 2.0 SQL Injection
Exploit Title: Online Food Ordering System v2 - Sql Injection Time-Based Blind Date: 01/10/2023 Exploit Author: Anıl Kızıltan Vendor Homepage: https://www.sourcecodester.com/php/16022/online-food-ordering-system-v2-using-php8-and-mysql-free-source-code.html Software Link:...
WordPress Restaurant Menu – Food Ordering System – Table Reservation Plugin < 2.3.6 is vulnerable to Cross Site Scripting (XSS)
Software Restaurant Menu – Food Ordering System – Table Reservation Type Plugin Vulnerable versions 2.3.6 Fixed in 2.3.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4657 Patch priority Medium CVSS severity Medium 6.3 Developer Claim ownership PSI...
CVE-2022-43046
Food Ordering Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in the component /foms/place-order.php...
CVE-2022-43046
Food Ordering Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in the component /foms/place-order.php...
Cross site scripting
Food Ordering Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in the component /foms/place-order.php...
CVE-2022-42990
Food Ordering Management System v1.0 was discovered to contain a SQL injection vulnerability via the component /foms/all-orders.php?status=Cancelled%20by%20Customer...
CVE-2022-42990
Food Ordering Management System v1.0 was discovered to contain a SQL injection vulnerability via the component /foms/all-orders.php?status=Cancelled%20by%20Customer...
CVE-2022-43046
Food Ordering Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in the component /foms/place-order.php...
CVE-2022-42990
Food Ordering Management System v1.0 was discovered to contain a SQL injection vulnerability via the component /foms/all-orders.php?status=Cancelled%20by%20Customer...
PT-2022-26697 · Unknown · Food Ordering Management System
Name of the Vulnerable Software and Affected Versions: Food Ordering Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. It can be exploited via the component /foms/all-orders.php?status=Cancelled%20by%20Customer. This vulnerability allows for potenti...
Food Ordering Management System SQL注入漏洞
Food Ordering Management System is a food ordering management system by Carlo Montero personal developer. It provides an online platform to order food from a restaurant or fast food chain. A security vulnerability exists in Food Ordering Management System v1.0, which was discovered to contain an...
CVE-2022-43046
Food Ordering Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in the component /foms/place-order.php...
PT-2022-26728 · Unknown · Food Ordering Management System
Name of the Vulnerable Software and Affected Versions: Food Ordering Management System version 1.0 Description: The issue is related to a cross-site scripting XSS vulnerability found in the /foms/place-order.php component. This type of vulnerability allows attackers to inject malicious scripts in...
CVE-2022-3776
The Restaurant Menu – Food Ordering System – Table Reservation plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.3.1. This is due to missing or incorrect nonce validation on several functions called via AJAX actions such as formsaction, setoption...
CVE-2022-2696
The CVE affects the WordPress plugin The Restaurant Menu – Food Ordering System – Table Reservation (versions up to 2.3.0). Root cause: missing capability checks and missing nonce validation in multiple AJAX actions, enabling authorization bypass. Impact: authenticated attackers with minimal priv...
CVE-2022-43082
A cross-site scripting XSS vulnerability in /fastfood/purchase.php of Fast Food Ordering System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the customer parameter...
Sql injection
Fast Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the component /fastfood/purchase.php...
Cross site scripting
A cross-site scripting XSS vulnerability in /fastfood/purchase.php of Fast Food Ordering System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the customer parameter...