Lucene search
K

8 matches found

NVD
NVD
added 2025/10/27 8:15 p.m.3 views

CVE-2025-12315

A vulnerability was determined in code-projects Food Ordering System 1.0. This affects an unknown function of the file /admin/menu.php. Executing a manipulation of the argument itemPrice can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclosed and ma...

9.8CVSS0.00028EPSS
Exploits1References5
OSV
OSV
added 2025/10/27 8:15 p.m.1 views

CVE-2025-12315

A vulnerability was determined in code-projects Food Ordering System 1.0. This affects an unknown function of the file /admin/menu.php. Executing a manipulation of the argument itemPrice can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclosed and ma...

9.8CVSS5.8AI score0.00028EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/27 8:2 p.m.3 views

EUVD-2025-36351

A vulnerability was determined in code-projects Food Ordering System 1.0. This affects an unknown function of the file /admin/menu.php. Executing manipulation of the argument itemPrice can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclosed and may ...

5.8CVSS5AI score0.00028EPSS
Exploits1References7
Vulnrichment
Vulnrichment
added 2025/10/27 8:2 p.m.2 views

CVE-2025-12315 code-projects Food Ordering System menu.php sql injection

A vulnerability was determined in code-projects Food Ordering System 1.0. This affects an unknown function of the file /admin/menu.php. Executing a manipulation of the argument itemPrice can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclosed and ma...

5.8CVSS5.1AI score0.00028EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/10/27 12:0 a.m.4 views

PT-2025-44033

Name of the Vulnerable Software and Affected Versions code-projects Food Ordering System version 1.0 Description A flaw exists in code-projects Food Ordering System 1.0 that allows for SQL injection. The issue is located in the file '/admin/menu.php'. Manipulation of the itemPrice argument can...

9.8CVSS5.2AI score0.00028EPSS
Exploits1References7
CNNVD
CNNVD
added 2025/10/27 12:0 a.m.3 views

Food Ordering System SQL注入漏洞

Food Ordering System is a food ordering system by Siddhesh Personal Developer. A SQL injection vulnerability exists in Food Ordering System version 1.0, which stems from an incorrect manipulation of the parameter itemPrice in the file /admin/menu.php, which could lead to a SQL injection attack...

9.8CVSS5.6AI score0.00028EPSS
Exploits1References6
NVD
NVD
added 2021/09/01 3:15 p.m.19 views

CVE-2021-36012

Magento Commerce versions 2.4.2 and earlier, 2.4.2-p1 and earlier and 2.3.7 and earlier are affected by a business logic error in the placeOrder graphql mutation. An authenticated attacker can leverage this vulnerability to altar the price of an item...

6.5CVSS0.00792EPSS
Exploits0References1
Prion
Prion
added 2021/09/01 3:15 p.m.21 views

Input validation

Magento Commerce versions 2.4.2 and earlier, 2.4.2-p1 and earlier and 2.3.7 and earlier are affected by an improper input validation vulnerability during the checkout process. An unauthenticated attacker can leverage this vulnerability to alter the price of items...

5CVSS7.8AI score0.01428EPSS
Exploits0References1Affected Software2
Rows per page
Query Builder