Online Ordering System 代码问题漏洞

Online Ordering System is a multi-store ordering system for janobe individual developers. It can be used for any small business. A vulnerability exists in SourceCodester Gadget Works Online Ordering System version 1.0 due to an unknown function in the file admin/products/controller.php?action=add...

CVE-2023-1418

CVE-2023-1418 affects SourceCodester Friendly Island Pizza Website and Ordering System 1.0, due to a cross-site scripting (XSS) vulnerability in the file cashconfirm.php within the POST Parameter Handler . The issue arises from manipulation of the transactioncode argument, enabling remote exploit...

CVE-2023-1379 SourceCodester Friendly Island Pizza Website and Ordering System POST Parameter addmem.php sql injection

A vulnerability was found in SourceCodester Friendly Island Pizza Website and Ordering System 1.0. It has been rated as critical. This issue affects some unknown processing of the file addmem.php of the component POST Parameter Handler. The manipulation of the argument firstname leads to sql...

CVE-2023-1379

CVE-2023-1379 affects SourceCodester Friendly Island Pizza Website and Ordering System v1.0. A vulnerability in the POST Parameter Handler, in the file addmem.php, allows exploitation via manipulating the firstname parameter to trigger SQL injection. The issue can be exploited remotely and the ex...

SourceCodester Friendly Island Pizza Website and Ordering System SQL注入漏洞

SourceCodester Friendly Island Pizza Website and Ordering System is the Island Pizza website and ordering system. A SQL injection vulnerability exists in version 1.0 of the SourceCodester Friendly Island Pizza Website and Ordering System, which stems from a problem with the file addmem.php, where...

PT-2023-16971 · Sourcecodester · Sourcecodester Friendly Island Pizza Website/Ordering System

Name of the Vulnerable Software and Affected Versions: SourceCodester Friendly Island Pizza Website and Ordering System version 1.0 Description: A problematic vulnerability was found in the file cashconfirm.php of the component POST Parameter Handler. The manipulation of the transactioncode...

Out-of-bounds

A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. Affected by this vulnerability is the function savemenu. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public a...

Cross site request forgery (csrf)

A Cross-Site Request Forgery CSRF in Online Food Ordering System v1.0 allows attackers to change user details and credentials via a crafted POST request...

CVE-2023-1392 SourceCodester Online Pizza Ordering System save_menu unrestricted upload

A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. Affected by this vulnerability is the function savemenu. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public a...

CVE-2023-1392

CVE-2023-1392 affects SourceCodester Online Pizza Ordering System 1.0. The vulnerability is in the save_menu function and enables unrestricted file upload, via a remote attack. The vulnerability has been publicly disclosed (VDB-222979) and is described as critical by NVD; various sources reiterat...

CVE-2023-1392 SourceCodester Online Pizza Ordering System save_menu unrestricted upload

A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. Affected by this vulnerability is the function savemenu. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public a...

PT-2023-20934 · Unknown · Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: Online Food Ordering System version 1.0 Description: A Cross-Site Request Forgery CSRF issue allows attackers to change user details and credentials via a crafted POST request. Recommendations: For Online Food Ordering System version 1.0,...

CVE-2023-27073

CVE-2023-27073 affects Online Food Ordering System version 1.0. The connected documents corroborate a Cross-Site Request Forgery (CSRF) vulnerability that allows an attacker to change user details and credentials via a crafted POST request. The issue stems from CSRF exposure in the application, w...

CVE-2023-27073

A Cross-Site Request Forgery CSRF in Online Food Ordering System v1.0 allows attackers to change user details and credentials via a crafted POST request...

CVE-2023-27073

A Cross-Site Request Forgery CSRF in Online Food Ordering System v1.0 allows attackers to change user details and credentials via a crafted POST request...

CVE-2023-1378

CVE-2023-1378 affects SourceCodester Friendly Island Pizza Website and Ordering System 1.0. A SQL injection vulnerability exists in the POST Parameter Handler’s paypalsuccess.php, triggered by manipulating the cusid parameter. Exploitation can be performed remotely; public disclosures exist. Impa...

CVE-2023-1364

A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file category.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The...

Sql injection

A vulnerability was found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/ajax.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The...

CVE-2023-1365 SourceCodester Online Pizza Ordering System ajax.php sql injection

A vulnerability was found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/ajax.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The...

CVE-2023-1365

CVE-2023-1365 describes a SQL injection in SourceCodester Online Pizza Ordering System 1.0, caused by manipulation of the username parameter in /admin/ajax.php. The vulnerability is exploitable remotely and has been publicly disclosed. Multiple sources report high severity (CVSS 3.1/3.0 ranges ar...