CVE-2023-24194

CVE-2023-24194 affects Online Food Ordering System v2. A cross-site scripting (XSS) vulnerability exists in the navbar.php page parameter, enabling injection of malicious scripts. Core details: the flaw is tied to the page parameter handling in navbar.php; CVSS 3.1 base score 6.1 (MEDIUM) with us...

CVE-2023-24191

Online Food Ordering System v2 was discovered to contain a cross-site scripting XSS vulnerability via the redirect parameter in signup.php...

CVE-2023-24194

Online Food Ordering System v2 was discovered to contain a cross-site scripting XSS vulnerability via the page parameter in navbar.php...

CVE-2023-24192

Online Food Ordering System v2 was discovered to contain a cross-site scripting XSS vulnerability via the redirect parameter in login.php...

CVE-2023-24194: Improper Neutralization of Input During Web Page Generation

Online Food Ordering System v2 was discovered to contain a cross-site scripting XSS vulnerability via the page parameter in navbar.php...

CVE-2023-24197: Improper Neutralization of Input During Web Page Generation

Online Food Ordering System v2 was discovered to contain a SQL injection vulnerability via the id parameter at vieworder.php...

CVE-2023-24195: Improper Neutralization of Input During Web Page Generation

Online Food Ordering System v2 was discovered to contain a cross-site scripting XSS vulnerability via the page parameter in index.php...

CVE-2023-24191: Improper Neutralization of Input During Web Page Generation

Online Food Ordering System v2 was discovered to contain a cross-site scripting XSS vulnerability via the redirect parameter in signup.php...

CVE-2023-24192: Improper Neutralization of Input During Web Page Generation

Online Food Ordering System v2 was discovered to contain a cross-site scripting XSS vulnerability via the redirect parameter in login.php...

CVE-2023-24192

CVE-2023-24192 affects Online Food Ordering System v2. A cross-site scripting (XSS) vulnerability exists in the login.php redirect parameter due to insufficient input validation/escaping. The CVSS 3.1 base metrics indicate NETWORK attack vector, LOW attack complexity, NONE privileges required, bu...

CVE-2023-24191

CVE-2023-24191 affects Online Food Ordering System v2, with a cross-site scripting (XSS) vulnerability triggered by the redirect parameter in signup.php. The CVSS 3.1 vector indicates Network attack, Low attack complexity, No privileges, User interaction required, and a Changed scope with Low imp...

CVE-2023-24197

Online Food Ordering System v2 was discovered to contain a SQL injection vulnerability via the id parameter at vieworder.php...

CVE-2023-24195

CVE-2023-24195 affects Online Food Ordering System v2. The issue is a cross-site scripting (XSS) vulnerability exploitable via the page parameter in index.php, caused by lack of proper filtering/escaping of user-supplied data. According to the CVE details, it has a CVSS v3.1 base score of 6.1 (ME...

Online Food Ordering System 跨站脚本漏洞

Online Food Ordering System is an online food ordering system. An SQL injection vulnerability exists in Online Food Ordering System, which stems from a lack of validation of externally entered SQL statements in the id parameter of the vieworder.php page. An attacker could use this vulnerability t...

Sql injection

Multiple SQL Injection vulnerabilities in tourist5 Online-food-ordering-system 1.0...

CVE-2020-29297

Multiple SQL Injection vulnerabilities in tourist5 Online-food-ordering-system 1.0...

CVE-2020-29297

Multiple SQL Injection vulnerabilities in tourist5 Online-food-ordering-system 1.0...

CVE-2020-29297: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL Injection vulnerabilities in tourist5 Online-food-ordering-system 1.0...

CVE-2020-29297

CVE-2020-29297 : Multiple SQL injection vulnerabilities affect the tourist5 Online-food-ordering-system 1.0. Public data in the connected documents identify the flaw as unsafe SQL query construction leading to unauthorized data access and manipulation. The CVSSv3.1 base metrics are high (9.8, CRI...

CVE-2023-0332

A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been classified as critical. Affected is an unknown function of the file admin/manageuser.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit...