Lucene search
K

11 matches found

Cvelist
Cvelist
added 7 hours ago5 views

CVE-2026-13571 SourceCodester Simple Food Ordering System cart.php logic error

A flaw has been found in SourceCodester Simple Food Ordering System 1.0. The affected element is an unknown function of the file /cart.php. Executing a manipulation of the argument itemprice can lead to business logic errors. The attack may be performed from remote. The exploit has been published...

6.9CVSS
Exploits0References6
EUVD
EUVD
added 7 hours ago5 views

EUVD-2026-40095

A flaw has been found in SourceCodester Simple Food Ordering System 1.0. The affected element is an unknown function of the file /cart.php. Executing a manipulation of the argument itemprice can lead to business logic errors. The attack may be performed from remote. The exploit has been published...

6.9CVSS5.7AI score
Exploits0References6
CVE
CVE
added 7 hours ago6 views

CVE-2026-13571

The CVE-2026-13571 affects SourceCodester Simple Food Ordering System 1.0. A flaw in an unknown function in /cart.php allows manipulation of the item_price argument, leading to business logic errors. The vulnerability can be exploited remotely, and an exploit has been published. No remediation or...

6.9CVSS5.7AI score
Exploits0References6
NVD
NVD
added 2025/10/27 8:15 p.m.5 views

CVE-2025-12315

A vulnerability was determined in code-projects Food Ordering System 1.0. This affects an unknown function of the file /admin/menu.php. Executing a manipulation of the argument itemPrice can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclosed and ma...

9.8CVSS0.00376EPSS
Exploits1References5
OSV
OSV
added 2025/10/27 8:15 p.m.3 views

CVE-2025-12315

A vulnerability was determined in code-projects Food Ordering System 1.0. This affects an unknown function of the file /admin/menu.php. Executing a manipulation of the argument itemPrice can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclosed and ma...

9.8CVSS5.8AI score0.00376EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/10/27 8:2 p.m.2 views

CVE-2025-12315 code-projects Food Ordering System menu.php sql injection

A vulnerability was determined in code-projects Food Ordering System 1.0. This affects an unknown function of the file /admin/menu.php. Executing a manipulation of the argument itemPrice can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclosed and ma...

5.8CVSS5.1AI score0.00376EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/27 8:2 p.m.5 views

EUVD-2025-36351

A vulnerability was determined in code-projects Food Ordering System 1.0. This affects an unknown function of the file /admin/menu.php. Executing manipulation of the argument itemPrice can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclosed and may ...

5.8CVSS5AI score0.00376EPSS
Exploits1References7
Positive Technologies
Positive Technologies
added 2025/10/27 12:0 a.m.7 views

PT-2025-44033

Name of the Vulnerable Software and Affected Versions code-projects Food Ordering System version 1.0 Description A flaw exists in code-projects Food Ordering System 1.0 that allows for SQL injection. The issue is located in the file '/admin/menu.php'. Manipulation of the itemPrice argument can...

9.8CVSS5.2AI score0.00376EPSS
Exploits1References7
CNNVD
CNNVD
added 2025/10/27 12:0 a.m.4 views

Food Ordering System SQL注入漏洞

Food Ordering System is a food ordering system by Siddhesh Personal Developer. A SQL injection vulnerability exists in Food Ordering System version 1.0, which stems from an incorrect manipulation of the parameter itemPrice in the file /admin/menu.php, which could lead to a SQL injection attack...

9.8CVSS5.6AI score0.00376EPSS
Exploits1References6
NVD
NVD
added 2021/09/01 3:15 p.m.23 views

CVE-2021-36012

Magento Commerce versions 2.4.2 and earlier, 2.4.2-p1 and earlier and 2.3.7 and earlier are affected by a business logic error in the placeOrder graphql mutation. An authenticated attacker can leverage this vulnerability to altar the price of an item...

6.5CVSS0.01801EPSS
Exploits0References1
Prion
Prion
added 2021/09/01 3:15 p.m.21 views

Input validation

Magento Commerce versions 2.4.2 and earlier, 2.4.2-p1 and earlier and 2.3.7 and earlier are affected by an improper input validation vulnerability during the checkout process. An unauthenticated attacker can leverage this vulnerability to alter the price of items...

5CVSS7.8AI score0.02294EPSS
Exploits0References1Affected Software2
Rows per page
Query Builder