Lucene search
+L

36 matches found

OSV
OSV
•added 2025/04/07 1:15 a.m.•19 views

CVE-2025-3329

A vulnerability classified as problematic has been found in Consumer Comanda Mobile up to 14.9.3.2/15.0.0.8. This affects an unknown part of the component Restaurant Order Handler. The manipulation of the argument Login/Password leads to cleartext transmission of sensitive information. The attack...

2.3CVSS4.3AI score0.00345EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2025/04/07 1:00 a.m.•17 views

CVE-2025-3329 Consumer Comanda Mobile Restaurant Order cleartext transmission

A vulnerability classified as problematic has been found in Consumer Comanda Mobile up to 14.9.3.2/15.0.0.8. This affects an unknown part of the component Restaurant Order Handler. The manipulation of the argument Login/Password leads to cleartext transmission of sensitive information. The attack...

3.1CVSS6.6AI score0.00345EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2025/04/07 1:00 a.m.•34 views

CVE-2025-3329 Consumer Comanda Mobile Restaurant Order cleartext transmission

A vulnerability classified as problematic has been found in Consumer Comanda Mobile up to 14.9.3.2/15.0.0.8. This affects an unknown part of the component Restaurant Order Handler. The manipulation of the argument Login/Password leads to cleartext transmission of sensitive information. The attack...

3.1CVSS0.00345EPSS
SaveExploits1References4
CVE
CVE
•added 2025/04/07 1:00 a.m.•76 views

CVE-2025-3329

CVE-2025-3329 affects Consumer Comanda Mobile (versions 14.9.3.2 through 15.0.0.8) in the Restaurant Order Handler component. The issue is the manipulation of the Login/Password argument, which results in sensitive information being transmitted in clear text. Exploitation requires proximity (loca...

3.1CVSS6.6AI score0.00345EPSS
SaveExploits1References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/07 12:00 a.m.•4 views

CVE-2025-3329: Cleartext Transmission of Sensitive Information

A vulnerability classified as problematic has been found in Consumer Comanda Mobile up to 14.9.3.2/15.0.0.8. This affects an unknown part of the component Restaurant Order Handler. The manipulation of the argument Login/Password leads to cleartext transmission of sensitive information. The attack...

3.1CVSS4.3AI score0.00345EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/04/07 12:00 a.m.•84 views

PT-2025-15129 · Unknown · Consumer Comanda Mobile

Name of the Vulnerable Software and Affected Versions: Consumer Comanda Mobile versions 14.9.3.2 through 15.0.0.8 Description: A problematic issue has been found in Consumer Comanda Mobile, affecting an unknown part of the Restaurant Order Handler component. The manipulation of the Login/Password...

3.1CVSS3.5AI score0.00345EPSS
SaveExploits1References7
NVD
NVD
•added 2024/07/17 4:15 p.m.•32 views

CVE-2024-6830

A vulnerability, which was classified as critical, was found in SourceCodester Simple Inventory Management System 1.0. Affected is an unknown function of the file action.php of the component Order Handler. The manipulation of the argument orderid leads to sql injection. It is possible to launch t...

7.5CVSS0.00446EPSS
SaveExploits1References4
OSV
OSV
•added 2024/07/17 4:15 p.m.•16 views

CVE-2024-6830

A vulnerability, which was classified as critical, was found in SourceCodester Simple Inventory Management System 1.0. Affected is an unknown function of the file action.php of the component Order Handler. The manipulation of the argument orderid leads to sql injection. It is possible to launch t...

7.5CVSS5.6AI score0.00446EPSS
SaveExploits1References4
CVE
CVE
•added 2024/07/17 4:00 p.m.•72 views

CVE-2024-6830

CVE-2024-6830 affects SourceCodester Simple Inventory Management System 1.0, specifically the Order Handler’s file action.php. The vulnerability arises from an unauthenticated manipulation of the order_id argument, leading to SQL injection. It is described as exploitable remotely, with public dis...

7.5CVSS7AI score0.00446EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2024/07/17 4:00 p.m.•37 views

CVE-2024-6830 SourceCodester Simple Inventory Management System Order action.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Simple Inventory Management System 1.0. Affected is an unknown function of the file action.php of the component Order Handler. The manipulation of the argument orderid leads to sql injection. It is possible to launch t...

6.5CVSS0.00446EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/17 12:00 a.m.•2 views

CVE-2024-6830: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in SourceCodester Simple Inventory Management System 1.0. Affected is an unknown function of the file action.php of the component Order Handler. The manipulation of the argument orderid leads to sql injection. It is possible to launch t...

7.5CVSS6.3AI score0.00446EPSS
SaveExploits1References1
OSV
OSV
•added 2023/07/28 6:15 a.m.•11 views

CVE-2023-3988

A vulnerability was found in Cafe Billing System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file index.php of the component Order Handler. The manipulation of the argument id leads to sql injection. The attack can be launched remotely...

9.8CVSS5.7AI score0.00827EPSS
SaveExploits1References3
Prion
Prion
•added 2023/07/28 6:15 a.m.•29 views

Sql injection

A vulnerability was found in Cafe Billing System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file index.php of the component Order Handler. The manipulation of the argument id leads to sql injection. The attack can be launched remotely...

6.5CVSS9.7AI score0.00827EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/07/28 6:00 a.m.•40 views

CVE-2023-3988 Cafe Billing System Order index.php sql injection

A vulnerability was found in Cafe Billing System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file index.php of the component Order Handler. The manipulation of the argument id leads to sql injection. The attack can be launched remotely...

6.5CVSS10AI score0.00827EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/28 12:00 a.m.•2 views

CVE-2023-3988: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Cafe Billing System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file index.php of the component Order Handler. The manipulation of the argument id leads to sql injection. The attack can be launched remotely...

9.8CVSS6.6AI score0.00827EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/07/28 12:00 a.m.•13 views

PT-2023-27140 · Unknown · Cafe Billing System

Name of the Vulnerable Software and Affected Versions: Cafe Billing System version 1.0 Description: A critical issue was found in the Cafe Billing System, affecting an unknown functionality of the file index.php of the component Order Handler. The manipulation of the id argument leads to SQL...

9.8CVSS8AI score0.00827EPSS
SaveExploits1References4
Rows per page
Query Builder