981 matches found
CVE-2022-32336: Improper Neutralization of Special Elements used in an SQL Command
Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/menus/viewmenu.php?id=...
PT-2022-21239
Name of the Vulnerable Software and Affected Versions Fast Food Ordering System version 1.0 Description The issue concerns SQL Injection via the "/ffos/admin/menus/view menu.php?id=" endpoint. This allows for potential manipulation of database queries. Recommendations For Fast Food Ordering Syste...
PT-2022-21236
Name of the Vulnerable Software and Affected Versions Fast Food Ordering System version 1.0 Description The issue concerns SQL Injection, which can be exploited via the "/ffos/admin/sales/receipt.php?id=" API endpoint. This allows for potential manipulation of database queries by injecting...
CVE-2022-32333: Improper Neutralization of Special Elements used in an SQL Command
Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/sales/receipt.php?id=...
PT-2022-21237
Name of the Vulnerable Software and Affected Versions Fast Food Ordering System version 1.0 Description The issue allows for SQL Injection via the "/ffos/admin/categories/manage category.php?id=" API endpoint, specifically targeting the id variable. This could potentially lead to unauthorized dat...
PT-2022-21233
Name of the Vulnerable Software and Affected Versions Fast Food Ordering System version 1.0 Description The issue concerns a SQL Injection vulnerability via the "/ffos/classes/Master.php?f=delete menu" API endpoint. This allows for potential unauthorized access and manipulation of database conten...
CVE-2022-32331: Improper Neutralization of Special Elements used in an SQL Command
Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/categories/viewcategory.php?id=...
CVE-2022-32335: Improper Neutralization of Special Elements used in an SQL Command
Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/menus/managemenu.php?id=...
PT-2022-21238
Name of the Vulnerable Software and Affected Versions Fast Food Ordering System version 1.0 Description The issue concerns SQL Injection, which can be exploited via the "/ffos/admin/menus/manage menu.php?id=" API endpoint. This allows for potential manipulation of database queries. Recommendation...
CVE-2022-1991
A vulnerability classified as problematic has been found in Fast Food Ordering System 1.0. Affected is the file Master.php of the Master List. The manipulation of the argument Description with the input foo " leads to cross site scripting. It is possible to launch the attack remotely but it...
Cross site scripting
A vulnerability classified as problematic has been found in Fast Food Ordering System 1.0. Affected is the file Master.php of the Master List. The manipulation of the argument Description with the input foo " leads to cross site scripting. It is possible to launch the attack remotely but it...
CVE-2022-1991 Fast Food Ordering System Master List Master.php cross site scripting
A vulnerability classified as problematic has been found in Fast Food Ordering System 1.0. Affected is the file Master.php of the Master List. The manipulation of the argument Description with the input foo " leads to cross site scripting. It is possible to launch the attack remotely but it...
CVE-2022-1991 Fast Food Ordering System Master List Master.php cross site scripting
A vulnerability classified as problematic has been found in Fast Food Ordering System 1.0. Affected is the file Master.php of the Master List. The manipulation of the argument Description with the input foo " leads to cross site scripting. It is possible to launch the attack remotely but it...
CVE-2022-1991
CVE-2022-1991 affects Fast Food Ordering System 1.0, targeting the Master.php Master List. The issue is a cross-site scripting (XSS) vulnerability caused by unsanitized input in the Description parameter (example payload: foo "'>). Exploitation is possible remotely but requires authentication....
PT-2022-14243
Name of the Vulnerable Software and Affected Versions Fast Food Ordering System version 1.0 Description A problematic issue has been discovered, affecting the Master.php file of the Master List. The manipulation of the Description argument with the input foo " leads to cross-site scripting. This...
CVE-2022-1991: Improper Neutralization of Input During Web Page Generation
A vulnerability classified as problematic has been found in Fast Food Ordering System 1.0. Affected is the file Master.php of the Master List. The manipulation of the argument Description with the input foo " leads to cross site scripting. It is possible to launch the attack remotely but it...
Fast Food Ordering System 1.0 Cross Site Scripting
Title: Fast Food Ordering System 1.0 Stored Cross-Site Scripting Author: Ashish Kumar Date: 05.31.2022 Vendor: https://www.sourcecodester.com/users/tips23 Software: https://www.sourcecodester.com/php/15366/fast-food-ordering-system-phpoop-free-source-code.html Reference:...
Online Food Ordering System Arbitrary File Upload Vulnerability
Online Food Ordering System is an online food ordering system. An arbitrary file upload vulnerability exists in Online Food Ordering System version 1.0, which stems from the lack of validation of uploaded files in the Select Image feature, and can be exploited to upload a malicious file that can ...
