Design/Logic Flaw

An arbitrary file upload vulnerability in the Select Image function of Online Food Ordering System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-29650

The CVE-2022-29650 entry concerns Online Food Ordering System v1.0 and a SQL injection in the /online-food-order/food-search.php search parameter. The vulnerability is introduced via the Search input, enabling SQL injection attacks that could affect confidentiality, integrity, and availability ac...

CVE-2022-29651

The CVE-2022-29651 entry pertains to Online Food Ordering System v1.0, where an arbitrary file upload vulnerability in the Select Image feature can be exploited by uploading a crafted PHP file to achieve remote code execution. Available sources (NVD/NIST, Red Hat, CNVD, CVE listings) confirm the ...

CVE-2022-29651

An arbitrary file upload vulnerability in the Select Image function of Online Food Ordering System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-29650: Improper Neutralization of Special Elements used in an SQL Command

Online Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the Search parameter at /online-food-order/food-search.php...

PT-2022-19755

Name of the Vulnerable Software and Affected Versions Online Food Ordering System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the Search parameter at the "/online-food-order/food-search.php" API endpoint. Recommendations F...

CVE-2022-29651: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in the Select Image function of Online Food Ordering System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

PT-2022-19756

Name of the Vulnerable Software and Affected Versions Online Food Ordering System version 1.0 Description The issue is related to an arbitrary file upload vulnerability in the Select Image function, allowing attackers to execute arbitrary code via a crafted PHP file. This can potentially lead to...

CVE-2021-41644

Remote Code Exection RCE vulnerability exists in Sourcecodester Online Food Ordering System 2.0 via a maliciously crafted PHP file that bypasses the image upload filters...

Remote code execution

Remote Code Exection RCE vulnerability exists in Sourcecodester Online Food Ordering System 2.0 via a maliciously crafted PHP file that bypasses the image upload filters...

CVE-2021-41644

Remote Code Exection RCE vulnerability exists in Sourcecodester Online Food Ordering System 2.0 via a maliciously crafted PHP file that bypasses the image upload filters...

CVE-2021-41644

CVE-2021-41644 affects Sourcecodester Online Food Ordering System 2.0. The vulnerability allows remote code execution through a maliciously crafted PHP file that bypasses image upload filters, enabling an attacker to upload and execute code. NVD reports high to critical severity (CVSS v2 7.5; v3....

CVE-2021-41644: Unrestricted Upload of File with Dangerous Type

Remote Code Exection RCE vulnerability exists in Sourcecodester Online Food Ordering System 2.0 via a maliciously crafted PHP file that bypasses the image upload filters...

PT-2021-23363

Name of the Vulnerable Software and Affected Versions Sourcecodester Online Food Ordering System version 2.0 Description A Remote Code Execution RCE issue exists due to a maliciously crafted PHP file that bypasses the image upload filters, allowing for potential code execution. Recommendations Fo...

Logic Flaw Vulnerability in Yazi Cloud Food Ordering System

Yazi cloud technology is a technology research and development innovation enterprise with rich experience in "Internet +" project diagnosis, planning, research and development, and landing as a whole. A logic flaw exists in the Yaziyun food ordering system, which can be exploited by attackers to...

SQL Injection Vulnerability in the Backend of Online Food Ordering System of Shenzhen Dianhang Technology Development Company Limited (CNVD-2021-04846)

Ltd. is a one-card system and product provider, offering attendance system, food ordering system, consumption system, access control system products and services. There is a SQL injection vulnerability in the backend of the online food ordering system of Shenzhen Dianhang Technology Development C...

SQL Injection Vulnerability in the Backend of Online Food Ordering System of Shenzhen Dianhang Science and Technology Development Co.

Ltd. is a one-card system and product provider, offering attendance system, food ordering system, consumption system, access control system products and services. There is a SQL injection vulnerability in the backend of the online food ordering system of Shenzhen Dianhang Technology Development C...

SQL Injection Vulnerability in the Backend of Online Food Ordering System of Shenzhen Dianhang Technology Development Co.

Ltd. is a one-card system and product provider, offering attendance system, ordering system, consumption system, access control system products and services. There is a SQL injection vulnerability in the backend of the online food ordering system of Shenzhen Dianhang Technology Development Co. An...

SQL Injection Vulnerability in the Frontend of Food Ordering Management System of Guangzhou Guowan Electronic Technology Co.

Ltd. ordering system is made for the local area network network ordering system, which is mainly applicable to small and medium-sized enterprises, institutions, hospitals, schools and other organizations to order food. Guangzhou Guowan Electronic Technology Co., Ltd. ordering management system in...

SQL Injection Vulnerability in Food Ordering System of Guangzhou Guowan Electronic Technology Co.

Guangzhou Guowan Electronic Technology Co., Ltd. is a high-tech enterprise with research, development, design and production of enterprise management system, intelligent card system and so on. There is a SQL injection vulnerability in the ordering system of Guangzhou Guowan Electronic Technology...