Lucene search
+L

2389 matches found

NVD
NVD
added 2023/02/18 8:15 a.m.14 views

CVE-2023-0902

A vulnerability was found in SourceCodester Simple Food Ordering System 1.0. It has been classified as problematic. This affects an unknown part of the file processorder.php. The manipulation of the argument order leads to cross site scripting. It is possible to initiate the attack remotely. The...

5.4CVSS4.1AI score0.02693EPSS
SaveExploits9References3
Prion
Prion
added 2023/02/18 8:15 a.m.19 views

Cross site scripting

A vulnerability was found in SourceCodester Simple Food Ordering System 1.0. It has been classified as problematic. This affects an unknown part of the file processorder.php. The manipulation of the argument order leads to cross site scripting. It is possible to initiate the attack remotely. The...

4CVSS5.5AI score0.02693EPSS
SaveExploits9References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/02/18 7:31 a.m.19 views

CVE-2023-0902 SourceCodester Simple Food Ordering System process_order.php cross site scripting

A vulnerability was found in SourceCodester Simple Food Ordering System 1.0. It has been classified as problematic. This affects an unknown part of the file processorder.php. The manipulation of the argument order leads to cross site scripting. It is possible to initiate the attack remotely. The...

4CVSS6.4AI score0.02693EPSS
SaveExploits9References3
CVE
CVE
added 2023/02/18 7:31 a.m.65 views

CVE-2023-0902

CVE-2023-0902 affects SourceCodester Simple Food Ordering System 1.0. The vulnerability is an input handling flaw in process_order.php that allows cross-site scripting (XSS) via manipulation of an argument, enabling injection of script code in the server response. Multiple sources (NVD and securi...

5.4CVSS4.6AI score0.02693EPSS
SaveExploits9References3Affected Software1
CNNVD
CNNVD
added 2023/02/18 12:00 a.m.35 views

Simple Food Ordering System 跨站脚本漏洞

Simple Food Ordering System is a simple food ordering system by the individual developer Carlo Montero. A cross-site scripting vulnerability exists in Simple Food Ordering System version 1.0, which stems from cross-site scripting due to misuse of the parameter order...

5.4CVSS4.9AI score0.02693EPSS
SaveExploits9References6
Positive Technologies
Positive Technologies
added 2023/02/18 12:00 a.m.7 views

PT-2023-16604 · Sourcecodester · Sourcecodester Simple Food Ordering System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Food Ordering System version 1.0 Description: A problem was found in the file process order.php, where the manipulation of the order argument leads to cross-site scripting. This issue can be initiated remotely...

5.4CVSS6.6AI score0.02693EPSS
SaveExploits9References7
Krebs on Security
Krebs on Security
added 2023/02/17 9:09 p.m.19 views

New Protections for Food Benefits Stolen by Skimmers

Millions of Americans receiving food assistance benefits just earned a new right that they cant yet enforce: The right to be reimbursed if funds on their Electronic Benefit Transfer EBT cards are stolen by card skimming devices secretly installed at cash machines and grocery store checkout lanes...

7AI score
SaveExploits0
NVD
NVD
added 2023/02/13 9:15 p.m.25 views

CVE-2023-24646

An arbitrary file upload vulnerability in the component /fos/admin/ajax.php of Food Ordering System v2.0 allows attackers to execute arbitrary code via a crafted PHP file...

9.8CVSS9.6AI score0.01071EPSS
SaveExploits1References1
NVD
NVD
added 2023/02/13 9:15 p.m.24 views

CVE-2023-24647

Food Ordering System v2.0 was discovered to contain a SQL injection vulnerability via the email parameter...

7.5CVSS7.8AI score0.00736EPSS
SaveExploits1References1
OSV
OSV
added 2023/02/13 9:15 p.m.11 views

CVE-2023-24646

An arbitrary file upload vulnerability in the component /fos/admin/ajax.php of Food Ordering System v2.0 allows attackers to execute arbitrary code via a crafted PHP file...

9.8CVSS7.5AI score0.01071EPSS
SaveExploits1References1
OSV
OSV
added 2023/02/13 9:15 p.m.8 views

CVE-2023-24647

Food Ordering System v2.0 was discovered to contain a SQL injection vulnerability via the email parameter...

7.5CVSS7.2AI score0.00736EPSS
SaveExploits1References1
Prion
Prion
added 2023/02/13 9:15 p.m.28 views

Sql injection

Food Ordering System v2.0 was discovered to contain a SQL injection vulnerability via the email parameter...

5CVSS7.8AI score0.00736EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2023/02/13 12:00 a.m.91 views

CVE-2023-24647

Summary of CVE-2023-24647 (Food Ordering System v2.0) : A SQL injection vulnerability exists in the email parameter of Food Ordering System v2.0. The issue enables unauthorized disclosure of data, with a CVSS v3.1 base score of 7.5 (Impact: Confidentiality High; Integrity/Availability: None). Con...

7.5CVSS7.8AI score0.00736EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2023/02/13 12:00 a.m.12 views

Online Food Ordering System 代码问题漏洞

Online Food Ordering System is an online food ordering system by Carlo Montero, an individual developer. A security vulnerability exists in Online Food Ordering System version v2.0, which originates from an arbitrary file upload vulnerability in the component /fos/admin/ajax.php, which can be...

9.8CVSS8.9AI score0.01071EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2023/02/13 12:00 a.m.11 views

Online Food Ordering System SQL注入漏洞

Online Food Ordering System is an online food ordering system by Carlo Montero, an individual developer. A security vulnerability exists in Online Food Ordering System version v2.0, which originates from an SQL injection vulnerability...

7.5CVSS7.5AI score0.00736EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2023/02/13 12:00 a.m.38 views

CVE-2023-24646

An arbitrary file upload vulnerability in the component /fos/admin/ajax.php of Food Ordering System v2.0 allows attackers to execute arbitrary code via a crafted PHP file...

9.8AI score0.01071EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2023/02/13 12:00 a.m.9 views

CVE-2023-24646

An arbitrary file upload vulnerability in the component /fos/admin/ajax.php of Food Ordering System v2.0 allows attackers to execute arbitrary code via a crafted PHP file...

9.6AI score0.01071EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2023/02/13 12:00 a.m.11 views

CVE-2023-24647

Food Ordering System v2.0 was discovered to contain a SQL injection vulnerability via the email parameter...

7.8AI score0.00736EPSS
SaveExploits1References1
CVE
CVE
added 2023/02/13 12:00 a.m.55 views

CVE-2023-24646

CVE-2023-24646 affects Food Ordering System v2.0; the vulnerability is an arbitrary file upload via /fos/admin/ajax.php that can lead to arbitrary code execution. The CVSS v3.1 base score is 9.8 (CRITICAL) with network access, no authentication, and high impact on confidentiality, integrity, and ...

9.8CVSS9.5AI score0.01071EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2023/02/13 12:00 a.m.37 views

CVE-2023-24647

Food Ordering System v2.0 was discovered to contain a SQL injection vulnerability via the email parameter...

8AI score0.00736EPSS
SaveExploits1References1
Rows per page
Query Builder