CVE-2023-24191

Online Food Ordering System v2 was discovered to contain a cross-site scripting XSS vulnerability via the redirect parameter in signup.php...

CVE-2023-24195

Online Food Ordering System v2 was discovered to contain a cross-site scripting XSS vulnerability via the page parameter in index.php...

PT-2023-19468 · Unknown · Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: Online Food Ordering System version v2 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability is present in the redirect parameter in the login.php file. Cross-site scripting XSS is a type of securit...

Online Food Ordering System 跨站脚本漏洞

Online Food Ordering System is an online food ordering system. A cross-site scripting vulnerability exists in Online Food Ordering System, which is caused by a lack of effective filtering and escaping of user-supplied data in the page parameter of index.php page, which can be exploited by attacke...

CVE-2023-24192

Online Food Ordering System v2 was discovered to contain a cross-site scripting XSS vulnerability via the redirect parameter in login.php...

Online Food Ordering System 跨站脚本漏洞

Online Food Ordering System is an online food ordering system. An SQL injection vulnerability exists in Online Food Ordering System, which stems from a lack of validation of externally entered SQL statements in the id parameter of the vieworder.php page. An attacker could use this vulnerability t...

CVE-2023-24191

Online Food Ordering System v2 was discovered to contain a cross-site scripting XSS vulnerability via the redirect parameter in signup.php...

PT-2023-19469 · Unknown · Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: Online Food Ordering System version v2 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability is present in the page parameter in the navbar.php file. Cross-site scripting XSS is a type of security...

CVE-2023-24195

CVE-2023-24195 affects Online Food Ordering System v2. The issue is a cross-site scripting (XSS) vulnerability exploitable via the page parameter in index.php, caused by lack of proper filtering/escaping of user-supplied data. According to the CVE details, it has a CVSS v3.1 base score of 6.1 (ME...

PT-2023-19470 · Unknown · Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: Online Food Ordering System version v2 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability can be exploited via the page parameter in the "index.php" endpoint. Recommendations: For Online Food...

CVE-2023-24191

CVE-2023-24191 affects Online Food Ordering System v2, with a cross-site scripting (XSS) vulnerability triggered by the redirect parameter in signup.php. The CVSS 3.1 vector indicates Network attack, Low attack complexity, No privileges, User interaction required, and a Changed scope with Low imp...

CVE-2023-24192

CVE-2023-24192 affects Online Food Ordering System v2. A cross-site scripting (XSS) vulnerability exists in the login.php redirect parameter due to insufficient input validation/escaping. The CVSS 3.1 base metrics indicate NETWORK attack vector, LOW attack complexity, NONE privileges required, bu...

CVE-2020-29297

Multiple SQL Injection vulnerabilities in tourist5 Online-food-ordering-system 1.0...

Sql injection

Multiple SQL Injection vulnerabilities in tourist5 Online-food-ordering-system 1.0...

CVE-2020-29297

Multiple SQL Injection vulnerabilities in tourist5 Online-food-ordering-system 1.0...

CVE-2020-29297

Multiple SQL Injection vulnerabilities in tourist5 Online-food-ordering-system 1.0...

CVE-2020-29297

CVE-2020-29297 : Multiple SQL injection vulnerabilities affect the tourist5 Online-food-ordering-system 1.0. Public data in the connected documents identify the flaw as unsafe SQL query construction leading to unauthorized data access and manipulation. The CVSSv3.1 base metrics are high (9.8, CRI...

Online-food-ordering-system SQL注入漏洞

Online-food-ordering-system is an application by tourist5 individual developers. A SQL injection vulnerability exists in Online-food-ordering-system version 1.0, which originates from SQL injection...

Trading Convenience for Credentials

Tap. Eat. Repeat. Regret? Using food or grocery delivery apps is great. It really is. Sure, there’s a fee, but when you can’t bring yourself to leave the house, it’s a nice treat to get what you want delivered. As a result, adoption of food apps has been incredibly fast and they are now a...

Buffer overflow

Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications component: Reporting. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracl...