Lucene search
+L

2772 matches found

Cvelist
Cvelist
•added 2021/10/29 4:55 p.m.•36 views

CVE-2021-41644

Remote Code Exection RCE vulnerability exists in Sourcecodester Online Food Ordering System 2.0 via a maliciously crafted PHP file that bypasses the image upload filters...

9.8AI score0.02498EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/29 12:00 a.m.•4 views

CVE-2021-41644: Unrestricted Upload of File with Dangerous Type

Remote Code Exection RCE vulnerability exists in Sourcecodester Online Food Ordering System 2.0 via a maliciously crafted PHP file that bypasses the image upload filters...

9.8CVSS5.9AI score0.02498EPSS
SaveExploits1References2
Openbugbounty
Openbugbounty
•added 2021/10/25 6:07 p.m.•8 views

lovecannedfood.com Improper Access Control vulnerability OBB-2206745

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

0.1AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2021/10/22 9:42 a.m.•16 views

eastendfood.coop Improper Access Control vulnerability OBB-2194603

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

0.1AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2021/10/06 12:00 a.m.•362 views

Online-Food-Ordering-Web-App SQL Injection

CVE-2021-41647 SQL Injection in Online-Food-Ordering-Web-App The Online-Food-Ordering-Web-App is vulnerable to un-authenticated error and time-based blind SQL Injection attacks. The username parameter on the /login.php page does not sanitize the user input, an attacker is able to bypass the login...

8AI score0.02008EPSS
SaveExploits4
Cvelist
Cvelist
•added 2021/10/01 2:32 p.m.•28 views

CVE-2021-41647

An un-authenticated error-based and time-based blind SQL injection vulnerability exists in Kaushik Jadhav Online Food Ordering Web App 1.0. An attacker can exploit the vulnerable "username" parameter in login.php and retrieve sensitive database information, as well as add an administrative user...

9.7AI score0.02008EPSS
SaveExploits4References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/01 12:00 a.m.•4 views

CVE-2021-41647: Improper Neutralization of Special Elements used in an SQL Command

An un-authenticated error-based and time-based blind SQL injection vulnerability exists in Kaushik Jadhav Online Food Ordering Web App 1.0. An attacker can exploit the vulnerable "username" parameter in login.php and retrieve sensitive database information, as well as add an administrative user...

9.1CVSS8AI score0.02008EPSS
SaveExploits4References2
GithubExploit
GithubExploit
•added 2021/09/28 7:59 a.m.•149 views

Exploit for SQL Injection in Online_Food_Ordering_Web_App_Project Online_Food_Ordering_Web_App

CVE-2021-41647 CVE-2021-41647 SQL Injection in Online-Food-Or...

9.1CVSS8.3AI score0.02008EPSS
SaveExploits4
Openbugbounty
Openbugbounty
•added 2021/09/22 11:06 a.m.•20 views

awards.bbcgoodfoodme.com Cross Site Scripting vulnerability OBB-2146508

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

SaveExploits0
ThreatPost
ThreatPost
•added 2021/09/21 1:14 p.m.•33 views

BlackMatter Strikes Iowa Farmers Cooperative, Demands $5.9M Ransom

A ransomware group believed to be the latest incarnation of the infamous DarkSide cybergang is being blamed for taking out a farmers’ cooperative online network, with extortionists demanding $5.9 million in ransom. The group BlackMatter is credited for the attack on an Iowa collective of farmers...

7.4AI score
SaveExploits0References10
CNVD
CNVD
•added 2021/09/16 12:00 a.m.•34 views

SourceCodester Simple Food Website SQL Injection Vulnerability

SourceCodester Simple Food Website is a CMS by SourceCodester, Inc. developed using PHP and MySQL database. sourcecodester Basic Shopping Cart is vulnerable to SQL injection, which can be exploited by attackers to bypass authentication Become an administrator...

9.8CVSS3.3AI score0.02916EPSS
SaveExploits1References1
HackRead
HackRead
•added 2021/09/03 7:22 p.m.•38 views

FBI warns of ransomware attacks against Food and Agriculture sectors

By Deeba Ahmed According to the agency, the impact of these ransomware attacks can be devastating for both small to big businesses. This is a post from HackRead.com Read the original post: FBI warns of ransomware attacks against Food and Agriculture sectors...

4.1AI score
SaveExploits0
Malwarebytes
Malwarebytes
•added 2021/09/03 4:23 p.m.•40 views

FBI warns of ransomware threat to food and agriculture

The FBI has issued a Private Industry Notification PIN about cybercriminal actors targeting the food and agriculture sector with ransomware attacks. Farms are literally the first step in one of the most important, if not the most important, supply chain in our economy: The food supply chain. As...

7.5AI score
SaveExploits0
OSV
OSV
•added 2021/07/30 2:15 p.m.•14 views

CVE-2021-34166

A SQL INJECTION vulnerability in Sourcecodester Simple Food Website 1.0 allows a remote attacker to Bypass Authentication and become Admin...

9.8CVSS7.4AI score0.02916EPSS
SaveExploits1References1
NVD
NVD
•added 2021/07/30 2:15 p.m.•22 views

CVE-2021-34166

A SQL INJECTION vulnerability in Sourcecodester Simple Food Website 1.0 allows a remote attacker to Bypass Authentication and become Admin...

9.8CVSS0.02916EPSS
SaveExploits1References1
Prion
Prion
•added 2021/07/30 2:15 p.m.•20 views

Sql injection

A SQL INJECTION vulnerability in Sourcecodester Simple Food Website 1.0 allows a remote attacker to Bypass Authentication and become Admin...

7.5CVSS9.5AI score0.02916EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2021/07/30 12:00 a.m.•14 views

SourceCodester Simple Food Website SQL注入漏洞

SourceCodester Simple Food Website is a CMS by SourceCodester, Inc. developed using PHP and MySQL database. sourcecodester Basic Shopping Cart is vulnerable to SQL injection, which can be exploited by attackers to bypass authentication Become an administrator...

9.8CVSS5.8AI score0.02916EPSS
SaveExploits1References1
CVE
CVE
•added 2021/07/28 3:04 p.m.•64 views

CVE-2021-34166

CVE-2021-34166 concerns Sourcecodester Simple Food Website 1.0, where a SQL injection vulnerability in the application enables a remote attacker to bypass authentication and gain admin privileges. The NVD entry documents a high/critical impact profile (CVSS v3.1: 9.8, sequence NETWORK/LOW complex...

9.8CVSS9.5AI score0.02916EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2021/07/28 3:04 p.m.•33 views

CVE-2021-34166

A SQL INJECTION vulnerability in Sourcecodester Simple Food Website 1.0 allows a remote attacker to Bypass Authentication and become Admin...

9.8AI score0.02916EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/28 12:00 a.m.•5 views

CVE-2021-34166: Improper Neutralization of Special Elements used in an SQL Command

A SQL INJECTION vulnerability in Sourcecodester Simple Food Website 1.0 allows a remote attacker to Bypass Authentication and become Admin...

9.8CVSS5.9AI score0.02916EPSS
SaveExploits1References2
Rows per page
Query Builder