CVE-2022-32335

Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/menus/managemenu.php?id=...

CVE-2022-32334

CVE-2022-32334 affects Fast Food Ordering System v1.0. The vulnerability is an SQL injection in /ffos/admin/categories/manage_category.php?id= due to lack of input validation for the id parameter. Documented impact is SQL data access/exfiltration via the vulnerable parameter (high severity per CV...

CVE-2022-32333

CVE-2022-32333 affects Fast Food Ordering System v1.0. The vulnerability is a SQL Injection in the admin receipt page, disclosed as /ffos/admin/sales/receipt.php?id=. The connected sources confirm a database query manipulation vector exposing Partial/High impact possibilities (per CVSS data, with...

CVE-2022-32333

Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/sales/receipt.php?id=...

CVE-2022-32332

Fast Food Ordering System v1.0 is vulnerable to SQL Injection in Master.php?f=delete_category due to missing input validation, enabling attackers to manipulate queries and potentially access or exfiltrate data. The sources do not provide a published patch/version for remediation or explicit explo...

CVE-2022-32332

Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/classes/Master.php?f=deletecategory...

CVE-2022-32331

CVE-2022-32331 affects Fast Food Ordering System v1.0. The issue is a SQL Injection in /ffos/admin/categories/view_category.php?id=, caused by unsanitized external input in the query. The CVE is corroborated by multiple sources (NVD, Red Hat, CNVD, CNVD-derived CNVD-2022-48950, and others) listin...

CVE-2022-32331

Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/categories/viewcategory.php?id=...

CVE-2022-32330

The CVE-2022-32330 entry concerns Fast Food Ordering System v1.0, where a SQL Injection vulnerability exists in Master.php?f=delete_menu. The connected documents clearly identify the affected application/file path and the underlying flaw (input for SQL statements not being validated), indicating ...

CVE-2022-32330

Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/classes/Master.php?f=deletemenu...

CVE-2022-32328

CVE-2022-32328 affects Fast Food Ordering System v1.0. The vulnerability is an arbitrary file deletion issue exploitable through the API endpoint /ffos/classes/Master.php?f=delete_img due to insufficient input/permission validation in the delete_img function. Impact statements in sources indicate...

CVE-2022-32336

Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/menus/viewmenu.php?id=...

CVE-2022-32336

CVE-2022-32336 concerns the Fast Food Ordering System v1.0, which is vulnerable to SQL Injection via the parameter id in /ffos/admin/menus/view_menu.php. The connected documents corroborate a lack of input validation that allows arbitrary SQL execution against the database, enabling data leakage ...

CVE-2022-32336

Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/menus/viewmenu.php?id=...

PT-2022-21234

Name of the Vulnerable Software and Affected Versions Fast Food Ordering System version 1.0 Description The issue concerns SQL Injection, which can be exploited via the "/ffos/admin/categories/view category.php?id=" API endpoint. The id variable is vulnerable to injection attacks. Recommendations...

CVE-2022-32330: Improper Neutralization of Special Elements used in an SQL Command

Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/classes/Master.php?f=deletemenu...

CVE-2022-32328: Improper Limitation of a Pathname to a Restricted Directory

Fast Food Ordering System v1.0 is vulnerable to Delete any file. via /ffos/classes/Master.php?f=deleteimg...

CVE-2022-32332: Improper Neutralization of Special Elements used in an SQL Command

Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/classes/Master.php?f=deletecategory...

CVE-2022-32334: Improper Neutralization of Special Elements used in an SQL Command

Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/categories/managecategory.php?id=...

PT-2022-21235

Name of the Vulnerable Software and Affected Versions Fast Food Ordering System version 1.0 Description The issue concerns SQL Injection via the "/ffos/classes/Master.php?f=delete category" API endpoint. This allows for potential manipulation of database queries. No information is provided about...