CVE-2023-45325 Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'address' parameter of the routers/add-users.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-45324

The connected document PT-2023-29499 documents a vulnerability in the Online Food Ordering System (version 1.0) affecting the price parameter in the routers/add-item.php endpoint. It describes an Unauthenticated SQL Injection that could allow an attacker to access sensitive data. The practical im...

CVE-2023-45323 Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'name' parameter of the routers/add-item.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-45323

CVE-2023-45323 affects Online Food Ordering System v1.0. The vulnerability is in the routers/add-item.php resource, where the name parameter is not properly validated, allowing unauthenticated SQL Injection. Multiple sources describe this issue as unauthenticated injections with the potential for...

CVE-2023-45323 Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'name' parameter of the routers/add-item.php resource does not validate the characters received and they are sent unfiltered to the database...

organicfoodmarkets.com.au Cross Site Scripting vulnerability OBB-3771676

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Online Food Ordering System SQL Injection Vulnerability

Online Food Ordering System is an online food ordering system by Carlo Montero, a personal developer. A SQL injection vulnerability exists in Online Food Ordering System v1.0, which is caused by insufficient filtering of the status parameter on the routers/edit-orders.php page...

Online Food Ordering System SQL Injection Vulnerability

Online Food Ordering System is an online food ordering system by Carlo Montero, a personal developer. A SQL injection vulnerability exists in Online Food Ordering System v1.0, which is caused by insufficient filtering of the address parameter on the routers/add-users.php page...

Number withdrawn

Online Food Ordering System is an online food ordering system by the individual developer Carlo Montero. The CVE number has been withdrawn...

Number withdrawn

Online Food Ordering System is an online food ordering system by the individual developer Carlo Montero. The CVE number has been withdrawn...

PT-2023-29498 · Unknown · Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: Online Food Ordering System version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. The name parameter of the "routers/add-item.php" resource does not validate the characters received and they are...

Number withdrawn

Online Food Ordering System is an online food ordering system by the individual developer Carlo Montero. The CVE number has been withdrawn...

Online Food Ordering System SQL Injection Vulnerability

Online Food Ordering System is an online food ordering system developed by Carlo Montero. A SQL injection vulnerability exists in Online Food Ordering System v1.0, which is caused by insufficient filtering of the phone parameter on the routers/register-router.php page...

PT-2023-29523 · Unknown · Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: Online Food Ordering System version 1.0 Description: The Online Food Ordering System is affected by multiple Unauthenticated SQL Injection vulnerabilities. The issue arises from the verified parameter of the routers/user-router.php resource,...

PT-2023-29516 · Unknown · Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: Online Food Ordering System version 1.0 Description: The Online Food Ordering System is affected by multiple Unauthenticated SQL Injection vulnerabilities. The issue arises from the phone parameter of the "routers/details-router.php" resource...

Number withdrawn

Online Food Ordering System is an online food ordering system by the individual developer Carlo Montero. The CVE number has been withdrawn...

PT-2023-29509 · Unknown · Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: Online Food Ordering System version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the status parameter of the "routers/edit-orders.php" resource does not validate the characters...

PT-2023-29521 · Unknown · Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: Online Food Ordering System version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities in the Online Food Ordering System. Specifically, the deleted parameter of the routers/user-router.php resource doe...

PT-2023-29506 · Unknown · Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: Online Food Ordering System version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the contact parameter of the "routers/add-users.php" resource does not validate the characters...

PT-2023-29503 · Unknown · Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: Online Food Ordering System version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the password parameter of the "routers/add-users.php" resource does not validate the characters...