Lucene search
+L

2389 matches found

NVD
NVD
added 2023/07/17 2:15 p.m.30 views

CVE-2023-35089

Cross-Site Request Forgery CSRF vulnerability in Really Simple Plugins Recipe Maker For Your Food Blog from Zip Recipes plugin = 8.0.7 versions...

8.8CVSS0.00256EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/07/17 1:31 p.m.20 views

CVE-2023-35089 WordPress Recipe Maker For Your Food Blog from Zip Recipes Plugin <= 8.0.7 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Really Simple Plugins Recipe Maker For Your Food Blog from Zip Recipes plugin = 8.0.7 versions...

4.3CVSS7.1AI score0.00256EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/07/17 12:00 a.m.16 views

WordPress plugin FiveStarPlugins Restaurant Menu and Food Ordering 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

8.8CVSS7.8AI score0.00256EPSS
SaveExploits0References2
wpexploit
wpexploit
added 2023/07/17 12:00 a.m.157 views

WP Food Manager < 1.0.4 - Admin+ Stored XSS

Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup 1. Go to "Food manager Add Food" and a...

5.4CVSS5.3AI score0.00503EPSS
SaveExploits2
CNVD
CNVD
added 2023/07/10 12:00 a.m.50 views

Food Ordering System SQL Injection Vulnerability

Food Ordering System is a food ordering system. A SQL injection vulnerability exists in Food Ordering System v1.0 due to a lack of validation of the id parameter against externally entered SQL statements. An attacker can exploit this vulnerability to execute illegal SQL commands to steal sensitiv...

7.2CVSS8.3AI score0.00897EPSS
SaveExploits1References1
NVD
NVD
added 2023/07/06 2:15 p.m.31 views

CVE-2023-36968

A SQL Injection vulnerability detected in Food Ordering System v1.0 allows attackers to run commands on the database by sending crafted SQL queries to the ID parameter...

7.2CVSS7.4AI score0.00897EPSS
SaveExploits1References2
OSV
OSV
added 2023/07/06 2:15 p.m.6 views

CVE-2023-36968

A SQL Injection vulnerability detected in Food Ordering System v1.0 allows attackers to run commands on the database by sending crafted SQL queries to the ID parameter...

7.2CVSS5.9AI score0.00897EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2023/07/06 2:15 p.m.6 views

CVE-2023-36968

A SQL Injection vulnerability detected in Food Ordering System v1.0 allows attackers to run commands on the database by sending crafted SQL queries to the ID parameter...

7.2CVSS7.2AI score0.00897EPSS
SaveExploits1References3
Prion
Prion
added 2023/07/06 2:15 p.m.24 views

Sql injection

A SQL Injection vulnerability detected in Food Ordering System v1.0 allows attackers to run commands on the database by sending crafted SQL queries to the ID parameter...

5.8CVSS7.3AI score0.00897EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2023/07/06 12:00 a.m.44 views

CVE-2023-36968

A SQL Injection vulnerability detected in Food Ordering System v1.0 allows attackers to run commands on the database by sending crafted SQL queries to the ID parameter...

7.7AI score0.00897EPSS
SaveExploits1References2
CVE
CVE
added 2023/07/06 12:00 a.m.144 views

CVE-2023-36968

CVE-2023-36968 affects the Food Ordering System v1.0. The root cause is lack of validation of the id parameter against SQL statements, enabling SQL injection. The vulnerability could allow an attacker to execute arbitrary SQL commands on the database (impact on confidentiality, integrity, and ava...

7.2CVSS7.4AI score0.00897EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/07/06 12:00 a.m.10 views

CVE-2023-36968

A SQL Injection vulnerability detected in Food Ordering System v1.0 allows attackers to run commands on the database by sending crafted SQL queries to the ID parameter...

8.5AI score0.00897EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2023/07/06 12:00 a.m.9 views

Food Ordering System SQL注入漏洞

Food Ordering System is a food ordering system. A SQL injection vulnerability exists in Food Ordering System v1.0 due to a lack of validation of the id parameter against externally entered SQL statements. An attacker can exploit this vulnerability to execute illegal SQL commands to steal sensitiv...

7.2CVSS8.2AI score0.00897EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/07/06 12:00 a.m.8 views

PT-2023-25756 · Unknown · Food Ordering System

Name of the Vulnerable Software and Affected Versions: Food Ordering System version 1.0 Description: A SQL Injection issue allows attackers to execute commands on the database by sending crafted SQL queries to the ID parameter. Recommendations: For Food Ordering System version 1.0, avoid using th...

7.2CVSS7.4AI score0.00897EPSS
SaveExploits1References3
Openbugbounty
Openbugbounty
added 2023/06/16 11:35 a.m.15 views

food-security.net Cross Site Scripting vulnerability OBB-3435801

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
CNNVD
CNNVD
added 2023/06/07 12:00 a.m.6 views

WordPress plugin WP Food Manager 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

5.4CVSS6.4AI score0.00503EPSS
SaveExploits2References2
Openbugbounty
Openbugbounty
added 2023/06/06 11:03 a.m.13 views

britishfoodimports.co.nz Cross Site Scripting vulnerability OBB-3396668

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
Patchstack
Patchstack
added 2023/05/10 12:00 a.m.27 views

WordPress Restaurant Menu – Food Ordering System – Table Reservation Plugin <= 2.3.6 is vulnerable to Cross Site Scripting (XSS)

Software Restaurant Menu – Food Ordering System – Table Reservation Type Plugin Vulnerable versions = 2.3.6 Fixed in 2.3.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-32516 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership...

7.1CVSS5.6AI score0.00389EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2023/05/09 1:15 p.m.9 views

CVE-2023-2594

A vulnerability, which was classified as critical, was found in SourceCodester Food Ordering Management System 1.0. Affected is an unknown function of the component Registration. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The...

9.8CVSS6.9AI score0.01009EPSS
SaveExploits0References2
NVD
NVD
added 2023/05/09 1:15 p.m.28 views

CVE-2023-2594

A vulnerability, which was classified as critical, was found in SourceCodester Food Ordering Management System 1.0. Affected is an unknown function of the component Registration. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The...

9.8CVSS8.1AI score0.01009EPSS
SaveExploits0References2
Rows per page
Query Builder