Lucene search
+L

2301 matches found

Cvelist
Cvelist
added 2023/03/16 12:50 p.m.28 views

CVE-2023-1432 SourceCodester Online Food Ordering System POST Request access control

A vulnerability was found in SourceCodester Online Food Ordering System 2.0 and classified as critical. Affected by this issue is some unknown functionality of the file /fos/admin/ajax.php?action=savesettings of the component POST Request Handler. The manipulation leads to improper access control...

7.5CVSS9.6AI score0.00591EPSS
SaveExploits0References2
CVE
CVE
added 2023/03/16 12:50 p.m.67 views

CVE-2023-1432

SourceCodester Online Food Ordering System 2.0 has a vulnerability in the POST Request Handler, specifically the file path /fos/admin/ajax.php?action=save_settings. The issue is an improper access control in this endpoint, which could allow a remote attacker to exploit it without authentication. ...

9.8CVSS8.5AI score0.00591EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2023/03/16 12:0 a.m.11 views

Online Food Ordering System 访问控制错误漏洞

Online Food Ordering System is an online food ordering system by Carlo Montero, an individual developer. An access control error vulnerability exists in SourceCodester Online Food Ordering System version 2.0, which stems from the presence of an unknown function in the file...

9.8CVSS7.4AI score0.00591EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/03/16 12:0 a.m.10 views

PT-2023-16979 · Sourcecodester · Sourcecodester Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Food Ordering System version 2.0 Description: A critical issue was found in the system, affecting some unknown functionality of the file "/fos/admin/ajax.php?action=save settings" of the component POST Request Handler...

9.8CVSS7.4AI score0.00591EPSS
SaveExploits0References4
OSV
OSV
added 2023/03/14 3:15 p.m.7 views

CVE-2023-27073

A Cross-Site Request Forgery CSRF in Online Food Ordering System v1.0 allows attackers to change user details and credentials via a crafted POST request...

6.5CVSS6.7AI score0.00262EPSS
SaveExploits0References2
Prion
Prion
added 2023/03/14 3:15 p.m.17 views

Cross site request forgery (csrf)

A Cross-Site Request Forgery CSRF in Online Food Ordering System v1.0 allows attackers to change user details and credentials via a crafted POST request...

4.3CVSS6.4AI score0.00262EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2023/03/14 12:0 a.m.7 views

PT-2023-20934 · Unknown · Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: Online Food Ordering System version 1.0 Description: A Cross-Site Request Forgery CSRF issue allows attackers to change user details and credentials via a crafted POST request. Recommendations: For Online Food Ordering System version 1.0,...

6.5CVSS6.5AI score0.00262EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2023/03/14 12:0 a.m.12 views

CVE-2023-27073

A Cross-Site Request Forgery CSRF in Online Food Ordering System v1.0 allows attackers to change user details and credentials via a crafted POST request...

6.5AI score0.00262EPSS
SaveExploits0References2
CVE
CVE
added 2023/03/14 12:0 a.m.55 views

CVE-2023-27073

CVE-2023-27073 affects Online Food Ordering System version 1.0. The connected documents corroborate a Cross-Site Request Forgery (CSRF) vulnerability that allows an attacker to change user details and credentials via a crafted POST request. The issue stems from CSRF exposure in the application, w...

6.5CVSS6.4AI score0.00262EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/03/14 12:0 a.m.30 views

CVE-2023-27073

A Cross-Site Request Forgery CSRF in Online Food Ordering System v1.0 allows attackers to change user details and credentials via a crafted POST request...

6.7AI score0.00262EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/03/14 12:0 a.m.11 views

Online Food Ordering System 跨站请求伪造漏洞

Online Food Ordering System is an online food ordering system by Carlo Montero, an individual developer. A security vulnerability exists in Online Food Ordering System version 1.0, which stems from a cross-site request forgery CSRF vulnerability. The vulnerability can be exploited by an attacker ...

6.5CVSS6.3AI score0.00262EPSS
SaveExploits0References3
OSV
OSV
added 2023/02/18 8:15 a.m.3 views

CVE-2023-0902

A vulnerability was found in SourceCodester Simple Food Ordering System 1.0. It has been classified as problematic. This affects an unknown part of the file processorder.php. The manipulation of the argument order leads to cross site scripting. It is possible to initiate the attack remotely. The...

5.4CVSS3.8AI score
SaveExploits0References3
NVD
NVD
added 2023/02/18 8:15 a.m.11 views

CVE-2023-0902

A vulnerability was found in SourceCodester Simple Food Ordering System 1.0. It has been classified as problematic. This affects an unknown part of the file processorder.php. The manipulation of the argument order leads to cross site scripting. It is possible to initiate the attack remotely. The...

5.4CVSS4.1AI score0.02693EPSS
SaveExploits9References3
Prion
Prion
added 2023/02/18 8:15 a.m.16 views

Cross site scripting

A vulnerability was found in SourceCodester Simple Food Ordering System 1.0. It has been classified as problematic. This affects an unknown part of the file processorder.php. The manipulation of the argument order leads to cross site scripting. It is possible to initiate the attack remotely. The...

4CVSS5.5AI score0.02693EPSS
SaveExploits9References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/02/18 7:31 a.m.18 views

CVE-2023-0902 SourceCodester Simple Food Ordering System process_order.php cross site scripting

A vulnerability was found in SourceCodester Simple Food Ordering System 1.0. It has been classified as problematic. This affects an unknown part of the file processorder.php. The manipulation of the argument order leads to cross site scripting. It is possible to initiate the attack remotely. The...

4CVSS6.4AI score0.02693EPSS
SaveExploits9References3
CVE
CVE
added 2023/02/18 7:31 a.m.57 views

CVE-2023-0902

CVE-2023-0902 affects SourceCodester Simple Food Ordering System 1.0. The vulnerability is an input handling flaw in process_order.php that allows cross-site scripting (XSS) via manipulation of an argument, enabling injection of script code in the server response. Multiple sources (NVD and securi...

5.4CVSS4.6AI score0.02693EPSS
SaveExploits9References3Affected Software1
CNNVD
CNNVD
added 2023/02/18 12:0 a.m.28 views

Simple Food Ordering System 跨站脚本漏洞

Simple Food Ordering System is a simple food ordering system by the individual developer Carlo Montero. A cross-site scripting vulnerability exists in Simple Food Ordering System version 1.0, which stems from cross-site scripting due to misuse of the parameter order...

5.4CVSS4.9AI score0.02693EPSS
SaveExploits9References6
Positive Technologies
Positive Technologies
added 2023/02/18 12:0 a.m.5 views

PT-2023-16604 · Sourcecodester · Sourcecodester Simple Food Ordering System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Food Ordering System version 1.0 Description: A problem was found in the file process order.php, where the manipulation of the order argument leads to cross-site scripting. This issue can be initiated remotely...

5.4CVSS6.6AI score0.02693EPSS
SaveExploits9References7
Krebs on Security
Krebs on Security
added 2023/02/17 9:9 p.m.15 views

New Protections for Food Benefits Stolen by Skimmers

Millions of Americans receiving food assistance benefits just earned a new right that they cant yet enforce: The right to be reimbursed if funds on their Electronic Benefit Transfer EBT cards are stolen by card skimming devices secretly installed at cash machines and grocery store checkout lanes...

7AI score
SaveExploits0
NVD
NVD
added 2023/02/13 9:15 p.m.19 views

CVE-2023-24646

An arbitrary file upload vulnerability in the component /fos/admin/ajax.php of Food Ordering System v2.0 allows attackers to execute arbitrary code via a crafted PHP file...

9.8CVSS9.6AI score0.01071EPSS
SaveExploits1References1
Rows per page
Query Builder