CVE-2023-27212

A cross-site scripting XSS vulnerability in /php-opos/signup.php of Online Pizza Ordering System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the redirect parameter...

CVE-2023-27208

A cross-site scripting XSS vulnerability in /php-opos/login.php of Online Pizza Ordering System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the redirect parameter...

CVE-2023-27210

Online Pizza Ordering System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/vieworder.php...

PT-2023-21006 · Unknown · Online Pizza Ordering System

Name of the Vulnerable Software and Affected Versions: Online Pizza Ordering System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/admin/manage user.php" API endpoint. Recommendations: For Online...

PT-2023-21008 · Unknown · Online Pizza Ordering System

Name of the Vulnerable Software and Affected Versions: Online Pizza Ordering System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/admin/view order.php" API endpoint. Recommendations: For Online Piz...

PT-2023-21009 · Unknown · Online Pizza Ordering System

Name of the Vulnerable Software and Affected Versions: Online Pizza Ordering System version 1.0 Description: A cross-site scripting XSS issue in the /admin/navbar.php endpoint of the Online Pizza Ordering System allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

Online Pizza Ordering System 跨站脚本漏洞

Online Pizza Ordering System is an online pizza ordering system by Carlo Montero, a personal developer. A security vulnerability exists in Online Pizza Ordering System version 1.0, which originates from a cross-site scripting XSS vulnerability in /admin/navbar.php, which can be exploited by an...

CVE-2023-27211

CVE-2023-27211 affects Online Pizza Ordering System v1.0. The vulnerability is an XSS in the /admin/navbar.php endpoint, exploitable via a crafted payload injected into the page parameter. Affected component: /admin/navbar.php; root cause: insufficient input sanitization leading to script/HTML ex...

CVE-2023-27211: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in /admin/navbar.php of Online Pizza Ordering System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the page parameter...

CVE-2023-27210: Improper Neutralization of Special Elements used in an SQL Command

Online Pizza Ordering System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/vieworder.php...

CVE-2023-27208: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in /php-opos/login.php of Online Pizza Ordering System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the redirect parameter...

CVE-2023-27212: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in /php-opos/signup.php of Online Pizza Ordering System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the redirect parameter...

CVE-2023-27207: Improper Neutralization of Special Elements used in an SQL Command

Online Pizza Ordering System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/manageuser.php...

CVE-2023-1301: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in SourceCodester Friendly Island Pizza Website and Ordering System 1.0. Affected by this issue is some unknown functionality of the file deleteorder.php of the component GET Parameter Handler. The manipulation of the argument id...

PT-2023-21007 · Unknown · Online Pizza Ordering System

Name of the Vulnerable Software and Affected Versions: Online Pizza Ordering System version 1.0 Description: A cross-site scripting XSS issue in the /php-opos/login.php endpoint of the Online Pizza Ordering System allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2023-27210

CVE-2023-27210 concerns Online Pizza Ordering System 1.0, where a SQL injection is reported via the id parameter in /admin/view_order.php. Multiple sources (NVD, Red Hat, CNNVD, CVE listing) consistently describe a SQLi issue in the admin view_order endpoint. The NVD entry assigns a severe CVSS v...

Online Pizza Ordering System SQL注入漏洞

Online Pizza Ordering System is an online pizza ordering system by Carlo Montero, an individual developer. A security vulnerability exists in Online Pizza Ordering System version 1.0, which is caused by a SQL injection vulnerability via the id parameter in /admin/manageuser.php...

CVE-2023-27208

A cross-site scripting (XSS) vulnerability affects Online Pizza Ordering System 1.0, exploitable via /php-opos/login.php where an attacker can inject a crafted payload into the redirect parameter to execute arbitrary web scripts or HTML. The vulnerability is documented across multiple sources (e....

CVE-2023-27207

CVE-2023-27207 affects Online Pizza Ordering System 1.0 and involves a SQL injection in the admin-facing endpoint. The vulnerability is triggered via the id parameter on /admin/manage_user.php, enabling potential unauthorized data access or manipulation. CVSSv3.1 metrics provided indicate a netwo...

CVE-2023-0987

A vulnerability classified as problematic was found in SourceCodester Online Pizza Ordering System 1.0. This vulnerability affects unknown code of the file index.php?page=checkout. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed...