2389 matches found
PT-2022-26743 · Unknown · Fast Food Ordering System
Name of the Vulnerable Software and Affected Versions: Fast Food Ordering System version 1.0 Description: The issue is related to a SQL injection vulnerability. It affects the /fastfood/purchase.php component. Recommendations: For Fast Food Ordering System version 1.0, consider restricting access...
PT-2022-26744 · Unknown · Fast Food Ordering System
Name of the Vulnerable Software and Affected Versions: Fast Food Ordering System version 1.0 Description: A cross-site scripting XSS issue exists in the /fastfood/purchase.php endpoint of the Fast Food Ordering System, allowing attackers to execute arbitrary web scripts or HTML via a crafted...
CVE-2022-43082
CVE-2022-43082 describes an XSS vulnerability in the Fast Food Ordering System v1.0, exploitable via the customer parameter in /fastfood/purchase.php. The issue is tied to the /fastfood/purchase.php endpoint, with the root cause implied as improper handling of user-supplied input. Affected compon...
CVE-2022-43082
A cross-site scripting XSS vulnerability in /fastfood/purchase.php of Fast Food Ordering System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the customer parameter...
CVE-2022-43081
Fast Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the component /fastfood/purchase.php...
CVE-2022-43276
Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the productId parameter at /phpaction/fetchSelectedfood.php...
Unknown Actors are Deploying RomCom RAT to Target Ukrainian Military
The threat actor behind a remote access trojan called RomCom RAT has been observed targeting Ukrainian military institutions as part of a new spear-phishing campaign that commenced on October 21, 2022. The development marks a shift in the attacker's modus operandi, which has been previously...
An odd kind of cybercrime: Gift vouchers, medical records, and...food
Someone with a gift for technology but a nasty habit of using it for very bad things has been spared from going to jail with a suspended sentence. Peter Foy, 18 at the time of his antics, racked up a remarkable, and slightly peculiar, list of compromises before being brought before the court. A...
The vulnerability of the router.php implementation of the POST Parameter Handler in the Food Ordering Management System allows a perpetrator to execute arbitrary SQL code.
The vulnerability in the implementation of the router.php script of the POST Parameter Handler component of the Food Ordering Management System’s control system is related to insufficient cleaning of special elements during the processing of the user name parameter. Exploiting this vulnerability...
Food Ordering Management System SQL Injection Vulnerability
Food Ordering Management System is a food ordering management system from Carlo Montero's personal developer. The Food Ordering Management System is vulnerable to SQL injection, which stems from the lack of validation of external input SQL statements by username, and can be exploited by attackers...
CVE-2022-3332
A vulnerability classified as critical has been found in SourceCodester Food Ordering Management System. This affects an unknown part of the file router.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection. It is possible to initiate the...
Sql injection
A vulnerability classified as critical has been found in SourceCodester Food Ordering Management System. This affects an unknown part of the file router.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection. It is possible to initiate the...
CVE-2022-3332
SourceCodester Food Ordering Management System contains a SQL injection vulnerability in the router.php file (POST Parameter Handler). The issue stems from unsafely handling the username parameter, allowing remote attackers to manipulate SQL queries. The vulnerability is publicly disclosed and ca...
CVE-2022-3332 SourceCodester Food Ordering Management System POST Parameter router.php sql injection
A vulnerability classified as critical has been found in SourceCodester Food Ordering Management System. This affects an unknown part of the file router.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection. It is possible to initiate the...
SourceCodester Food Ordering Management System 安全漏洞
Food Ordering Management System is a food ordering management system from Carlo Montero's personal developer. The Food Ordering Management System is vulnerable to SQL injection, which stems from the lack of validation of external input SQL statements by username, and can be exploited by attackers...
Nanjing Thing Orange Information Technology Co., Ltd. home recipe book APP has information leakage vulnerability
Home-Cooked Recipe Book APP is a food recipe software. Nanjing Thing Orange Information Technology Co., Ltd. has an information leakage vulnerability in Home Recipe Book APP, which can be exploited by attackers to obtain sensitive information...
CVE-2022-36759
Online Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the component /dishes.php?resid=...
CVE-2022-36759
Online Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the component /dishes.php?resid=...