Lucene search
+L

1986 matches found

Cvelist
Cvelist
•added 2023/07/06 12:00 a.m.•47 views

CVE-2023-36968

A SQL Injection vulnerability detected in Food Ordering System v1.0 allows attackers to run commands on the database by sending crafted SQL queries to the ID parameter...

7.7AI score0.00897EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/07/06 12:00 a.m.•12 views

PT-2023-25756 · Unknown · Food Ordering System

Name of the Vulnerable Software and Affected Versions: Food Ordering System version 1.0 Description: A SQL Injection issue allows attackers to execute commands on the database by sending crafted SQL queries to the ID parameter. Recommendations: For Food Ordering System version 1.0, avoid using th...

7.2CVSS7.4AI score0.00897EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/06 12:00 a.m.•8 views

CVE-2023-36968: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability detected in Food Ordering System v1.0 allows attackers to run commands on the database by sending crafted SQL queries to the ID parameter...

7.2CVSS7.2AI score0.00897EPSS
SaveExploits1References2
Patchstack
Patchstack
•added 2023/05/10 12:00 a.m.•29 views

WordPress Restaurant Menu – Food Ordering System – Table Reservation Plugin <= 2.3.6 is vulnerable to Cross Site Scripting (XSS)

Software Restaurant Menu – Food Ordering System – Table Reservation Type Plugin Vulnerable versions = 2.3.6 Fixed in 2.3.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-32516 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership...

7.1CVSS5.6AI score0.00389EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2023/05/09 1:15 p.m.•11 views

CVE-2023-2594

A vulnerability, which was classified as critical, was found in SourceCodester Food Ordering Management System 1.0. Affected is an unknown function of the component Registration. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The...

9.8CVSS6.9AI score0.01009EPSS
SaveExploits0References2
NVD
NVD
•added 2023/05/09 1:15 p.m.•30 views

CVE-2023-2594

A vulnerability, which was classified as critical, was found in SourceCodester Food Ordering Management System 1.0. Affected is an unknown function of the component Registration. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The...

9.8CVSS8.1AI score0.01009EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/05/09 12:00 a.m.•17 views

Food Ordering Management System SQL注入漏洞

Food Ordering Management System is a food ordering management system by Carlo Montero personal developer. It provides an online platform to order food from a restaurant or fast food chain. A SQL injection vulnerability exists in SourceCodester Food Ordering Management System version 1.0, which...

9.8CVSS7.5AI score0.01009EPSS
SaveExploits0References4
NVD
NVD
•added 2023/05/08 3:15 p.m.•34 views

CVE-2023-30092

SourceCodester Online Pizza Ordering System v1.0 is vulnerable to SQL Injection via the QTY parameter...

9.8CVSS9.9AI score0.00978EPSS
SaveExploits1References2
Prion
Prion
•added 2023/05/08 3:15 p.m.•30 views

Sql injection

SourceCodester Online Pizza Ordering System v1.0 is vulnerable to SQL Injection via the QTY parameter...

7.5CVSS9.8AI score0.00978EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
•added 2023/05/08 12:00 a.m.•14 views

CVE-2023-30092

SourceCodester Online Pizza Ordering System v1.0 is vulnerable to SQL Injection via the QTY parameter...

9.9AI score0.00978EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/05/08 12:00 a.m.•22 views

Online Pizza Ordering System SQL注入漏洞

Online Pizza Ordering System is an online pizza ordering system by Carlo Montero Personal Developer. A security vulnerability exists in Online Pizza Ordering System v1.0, which was discovered to contain an SQL injection attack via QTY parameters...

9.8CVSS8.6AI score0.00978EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/08 12:00 a.m.•10 views

CVE-2023-30092: Improper Neutralization of Special Elements used in an SQL Command

SourceCodester Online Pizza Ordering System v1.0 is vulnerable to SQL Injection via the QTY parameter...

9.8CVSS5.8AI score0.00978EPSS
SaveExploits1References3
CVE
CVE
•added 2023/05/08 12:00 a.m.•79 views

CVE-2023-30092

The CVE-2023-30092 entry concerns the SourceCodester Online Pizza Ordering System v1.0, vulnerable to SQL Injection via the QTY parameter. The root cause is improper handling/validation of the QTY input in SQL queries, enabling attacker-controlled data to affect confidentiality, integrity, and av...

9.8CVSS9.8AI score0.00978EPSS
SaveExploits1References2Affected Software1
OSV
OSV
•added 2023/05/05 2:15 a.m.•12 views

CVE-2023-30122

An arbitrary file upload vulnerability in the component /admin/ajax.php?action=savemenu of Online Food Ordering System v2.0 allows attackers to execute arbitrary code via uploading a crafted PHP file...

9.8CVSS7.6AI score0.00983EPSS
SaveExploits1References1
NVD
NVD
•added 2023/05/05 2:15 a.m.•21 views

CVE-2023-30122

An arbitrary file upload vulnerability in the component /admin/ajax.php?action=savemenu of Online Food Ordering System v2.0 allows attackers to execute arbitrary code via uploading a crafted PHP file...

9.8CVSS9.6AI score0.00983EPSS
SaveExploits1References1
CVE
CVE
•added 2023/05/05 12:00 a.m.•69 views

CVE-2023-30122

CVE-2023-30122 describes an arbitrary file upload vulnerability in the Online Food Ordering System v2.0, specifically in the component /admin/ajax.php?action=save_menu. The underlying issue allows an attacker to upload a crafted PHP file and execute arbitrary code on the server. The public-facing...

9.8CVSS9.5AI score0.00983EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/05/05 12:00 a.m.•16 views

CVE-2023-30122

An arbitrary file upload vulnerability in the component /admin/ajax.php?action=savemenu of Online Food Ordering System v2.0 allows attackers to execute arbitrary code via uploading a crafted PHP file...

9.7AI score0.00983EPSS
SaveExploits1References1
Packet Storm
Packet Storm
•added 2023/05/05 12:00 a.m.•300 views

Online Pizza Ordering System 1.0 Shell Upload

Exploit Title: Online Pizza Ordering System 1.0 - Unauthenticated File Upload Date: 03/05/2023 Exploit Author: URGAN Vendor Homepage: https://www.sourcecodester.com/php/16166/online-pizza-ordering-system-php-free-source-code.html Software Link:...

9.8CVSS7.1AI score0.03624EPSS
SaveExploits4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/05 12:00 a.m.•4 views

CVE-2023-30122: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in the component /admin/ajax.php?action=savemenu of Online Food Ordering System v2.0 allows attackers to execute arbitrary code via uploading a crafted PHP file...

9.8CVSS6.4AI score0.00983EPSS
SaveExploits1References3
Exploit DB
Exploit DB
•added 2023/05/05 12:00 a.m.•417 views

Online Pizza Ordering System v1.0 - Unauthenticated File Upload

Exploit Title: Online Pizza Ordering System 1.0 - Unauthenticated File Upload Date: 03/05/2023 Exploit Author: URGAN Vendor Homepage: https://www.sourcecodester.com/php/16166/online-pizza-ordering-system-php-free-source-code.html Software Link:...

9.8CVSS6.8AI score0.03624EPSS
SaveExploits4
Rows per page
Query Builder