Lucene search
+L

2375 matches found

OSV
OSV
added 2023/12/31 11:15 a.m.11 views

CVE-2023-52180

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Really Simple Plugins Recipe Maker For Your Food Blog from Zip Recipes.This issue affects Recipe Maker For Your Food Blog from Zip Recipes: from n/a through 8.1.0...

8.1CVSS7.3AI score0.00487EPSS
SaveExploits0References1
CVE
CVE
added 2023/12/31 10:17 a.m.70 views

CVE-2023-52180

CVE-2023-52180 affects Recipe Maker For Your Food Blog from Zip Recipes (Zip Recipes) up to version 8.1.0. The Wordfence vulnerability list notes an Authenticated (Contributor+) SQL Injection in this plugin, with a patch status of Patched. Impact is SQL Injection that can be triggered by an authe...

8.1CVSS8.6AI score0.00487EPSS
SaveExploits0References1Affected Software1
Openbugbounty
Openbugbounty
added 2023/12/15 8:24 a.m.3 views

us.openfoodfacts.org Cross Site Scripting vulnerability OBB-3814505

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
NVD
NVD
added 2023/11/20 7:15 p.m.32 views

CVE-2023-5340

The Five Star Restaurant Menu and Food Ordering WordPress plugin before 2.4.11 unserializes user input via an AJAX action available to unauthenticated users, allowing them to perform PHP Object Injection when a suitable gadget is present on the blog...

9.8CVSS0.01245EPSS
SaveExploits2References1
Cvelist
Cvelist
added 2023/11/20 6:55 p.m.43 views

CVE-2023-5340 Five Star Restaurant Menu and Food Ordering < 2.4.11 - Unauthenticated PHP Object Injection

The Five Star Restaurant Menu and Food Ordering WordPress plugin before 2.4.11 unserializes user input via an AJAX action available to unauthenticated users, allowing them to perform PHP Object Injection when a suitable gadget is present on the blog...

9.9AI score0.01245EPSS
SaveExploits2References1
CNNVD
CNNVD
added 2023/11/20 12:00 a.m.7 views

WordPress Plugin Five Star Restaurant Menu and Food Ordering Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

9.8CVSS7AI score0.01245EPSS
SaveExploits2References2
Openbugbounty
Openbugbounty
added 2023/11/04 4:44 a.m.14 views

greekfoodtales.com Cross Site Scripting vulnerability OBB-3773180

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
NVD
NVD
added 2023/11/02 3:15 p.m.34 views

CVE-2023-45345

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'deleted' parameter of the routers/user-router.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS10AI score0.007EPSS
SaveExploits1References2
OSV
OSV
added 2023/11/02 3:15 p.m.22 views

CVE-2023-45345

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'deleted' parameter of the routers/user-router.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS5.8AI score0.007EPSS
SaveExploits1References2
OSV
OSV
added 2023/11/02 3:15 p.m.9 views

CVE-2023-45346

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'role' parameter of the routers/user-router.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS5.8AI score0.007EPSS
SaveExploits1References2
OSV
OSV
added 2023/11/02 3:15 p.m.7 views

CVE-2023-45338

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter of the routers/add-ticket.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS5.8AI score0.007EPSS
SaveExploits1References2
OSV
OSV
added 2023/11/02 3:15 p.m.11 views

CVE-2023-45347

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'verified' parameter of the routers/user-router.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS5.8AI score0.007EPSS
SaveExploits1References2
NVD
NVD
added 2023/11/02 3:15 p.m.29 views

CVE-2023-45338

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter of the routers/add-ticket.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS10AI score0.007EPSS
SaveExploits1References2
NVD
NVD
added 2023/11/02 3:15 p.m.24 views

CVE-2023-45347

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'verified' parameter of the routers/user-router.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS10AI score0.007EPSS
SaveExploits1References2
NVD
NVD
added 2023/11/02 3:15 p.m.25 views

CVE-2023-45346

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'role' parameter of the routers/user-router.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS10AI score0.007EPSS
SaveExploits1References2
Prion
Prion
added 2023/11/02 3:15 p.m.42 views

Sql injection

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'deleted' parameter of the routers/user-router.php resource does not validate the characters received and they are sent unfiltered to the database...

7.5CVSS9.9AI score0.007EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2023/11/02 3:15 p.m.37 views

Sql injection

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter of the routers/add-ticket.php resource does not validate the characters received and they are sent unfiltered to the database...

7.5CVSS9.9AI score0.007EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2023/11/02 3:15 p.m.40 views

Sql injection

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'role' parameter of the routers/user-router.php resource does not validate the characters received and they are sent unfiltered to the database...

7.5CVSS9.9AI score0.007EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2023/11/02 3:15 p.m.34 views

Sql injection

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'verified' parameter of the routers/user-router.php resource does not validate the characters received and they are sent unfiltered to the database...

7.5CVSS9.9AI score0.007EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2023/11/02 2:15 p.m.9 views

CVE-2023-45343

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'ticketid' parameter of the routers/ticket-message.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS5.8AI score0.007EPSS
SaveExploits1References2
Rows per page
Query Builder