5201 matches found
CVE-2022-32335
Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/menus/managemenu.php?id=...
CVE-2022-32336
Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/menus/viewmenu.php?id=...
CVE-2022-32336
Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/menus/viewmenu.php?id=...
CVE-2022-32336
Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/menus/viewmenu.php?id=...
WooCommerce Menu Cart < 2.12.0 - Reflected Cross-Site Scripting
The plugin does not escape some URLs before outputting them back in attributes, leading to Reflected Cross-Site Scripting PoC When there is no shop active yet: https://example.com/wp-admin/index.php?a"...
WooCommerce Menu Cart < 2.12.0 - Reflected Cross-Site Scripting
The plugin does not escape some URLs before outputting them back in attributes, leading to Reflected Cross-Site Scripting When there is no shop active yet: https://example.com/wp-admin/index.php?a"alert/XSS/...
PT-2022-21233
Name of the Vulnerable Software and Affected Versions Fast Food Ordering System version 1.0 Description The issue concerns a SQL Injection vulnerability via the "/ffos/classes/Master.php?f=delete menu" API endpoint. This allows for potential unauthorized access and manipulation of database conten...
SQL Injection Vulnerability in Fast Food Ordering System
Fast Food Ordering System is a fast food ordering system from Carlo Montero's personal developer. version 1.0 of Fast Food Ordering System is vulnerable to SQL injection, which originates from /ffos/admin/menus/managemenu.php?id= The page lacks validation for external input SQL statements, which...
SQL Injection Vulnerability in Fast Food Ordering System
Fast Food Ordering System is a fast food ordering system from Carlo Montero's personal developer. version 1.0 of Fast Food Ordering System is vulnerable to SQL injection, which originates from /ffos/admin/menus/viewmenu.php?id=page Lack of validation of external input SQL statements can be...
SQL Injection Vulnerability in Fast Food Ordering System
Fast Food Ordering System is a fast food ordering system from Carlo Montero's personal developer. version 1.0 of Fast Food Ordering System is vulnerable to SQL injection, which originates from /ffos/classes/Master.php?f=deletemenu The page lacks validation for external input SQL statements, which...
Food-order-and-table-reservation-system SQL Injection Vulnerability
Food-order-and-table-reservation-system is enabling users to order food online and reserve a table for dine-in if there is no delivery option. food-order-and-table-reservation-system version 1.0 is vulnerable to an SQL injection vulnerability that originates in the categorywise-menu.php page wher...
WordPress WooCommerce Menu Cart plugin <= 2.11.0 - Reflected Cross-Site Scripting (XSS) vulnerability
Reflected Cross-Site Scripting XSS vulnerability discovered by WPScanTeam in WordPress WooCommerce Menu Cart plugin versions = 2.11.0. Solution Update the WordPress WooCommerce Menu Cart plugin to the latest available version at least 2.12.0...
WordPress WP Menu Cart plugin <= 2.11.0 - Reflected Cross-Site Scripting (XSS) vulnerability
Reflected Cross-Site Scripting XSS vulnerability discovered in WordPress WP Menu Cart plugin versions = 2.11.0. Solution Update the WordPress WP Menu Cart plugin to the latest available version at least 2.12.0...
CVE-2022-28478
SeedDMS 6.0.17 and 5.1.24 are vulnerable to Directory Traversal. The "Remove file" functionality inside the "Log files management" menu does not sanitize user input allowing attackers with admin privileges to delete arbitrary files on the remote system...
Google Android Permission Licensing and Access Control Vulnerabilities
Google Android is a Linux-based open-source operating system from the U.S. company Google Google. Google Android has an elevation of privilege vulnerability that originates in onCreateContextMenu in NetworkProviderSettings.java. Due to a lack of privilege checking, a non-owner user could change...
CVE-2022-30481
Food-order-and-table-reservation-system- 1.0 is vulnerable to SQL Injection in categorywise-menu.php via the catid parameters...
CVE-2022-30481
Food-order-and-table-reservation-system- 1.0 is vulnerable to SQL Injection in categorywise-menu.php via the catid parameters...
CVE-2022-30481
Food-order-and-table-reservation-system- 1.0 is vulnerable to SQL Injection in categorywise-menu.php via the catid parameters...
SQL injection vulnerabilities in food-order and table-reservation systems
Food-order-and-table-reservation-system is enabling users to order food online and reserve a table for dine-in if there is no delivery option. food-order-and-table-reservation-system version 1.0 is vulnerable to an SQL injection vulnerability that originates in the categorywise-menu.php page wher...