1986 matches found
CVE-2023-24646
An arbitrary file upload vulnerability in the component /fos/admin/ajax.php of Food Ordering System v2.0 allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2023-24647
Food Ordering System v2.0 was discovered to contain a SQL injection vulnerability via the email parameter...
CVE-2023-24647
Summary of CVE-2023-24647 (Food Ordering System v2.0) : A SQL injection vulnerability exists in the email parameter of Food Ordering System v2.0. The issue enables unauthorized disclosure of data, with a CVSS v3.1 base score of 7.5 (Impact: Confidentiality High; Integrity/Availability: None). Con...
PT-2023-19721
Name of the Vulnerable Software and Affected Versions Food Ordering System version 2.0 Description The issue is related to an arbitrary file upload vulnerability in the component /fos/admin/ajax.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. There is no...
PT-2023-19722
Name of the Vulnerable Software and Affected Versions Food Ordering System version 2.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the email parameter. Recommendations For Food Ordering System version 2.0, consider restricting the use...
CVE-2023-24646
CVE-2023-24646 affects Food Ordering System v2.0; the vulnerability is an arbitrary file upload via /fos/admin/ajax.php that can lead to arbitrary code execution. The CVSS v3.1 base score is 9.8 (CRITICAL) with network access, no authentication, and high impact on confidentiality, integrity, and ...
CVE-2023-24646
An arbitrary file upload vulnerability in the component /fos/admin/ajax.php of Food Ordering System v2.0 allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2023-24647: Improper Neutralization of Special Elements used in an SQL Command
Food Ordering System v2.0 was discovered to contain a SQL injection vulnerability via the email parameter...
CVE-2023-24646: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in the component /fos/admin/ajax.php of Food Ordering System v2.0 allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2023-24647
Food Ordering System v2.0 was discovered to contain a SQL injection vulnerability via the email parameter...
Online Food Ordering System login.php Cross-Site Scripting Vulnerability
A cross-site scripting vulnerability exists in Online Food Ordering System, an online food ordering system. The vulnerability is caused by a lack of effective filtering and escaping of user-supplied data in the redirect parameter of the login.php page, which can be exploited by attackers to cause...
Online Food Ordering System SQL Injection Vulnerability (CNVD-2023-07974)
Online Food Ordering System is an online food ordering system. An SQL injection vulnerability exists in Online Food Ordering System, which stems from a lack of validation of externally entered SQL statements in the id parameter of the vieworder.php page. An attacker could use this vulnerability t...
Online Food Ordering System index.php Cross-Site Scripting Vulnerability
Online Food Ordering System is an online food ordering system. A cross-site scripting vulnerability exists in Online Food Ordering System, which is caused by a lack of effective filtering and escaping of user-supplied data in the page parameter of index.php page, which can be exploited by attacke...
CVE-2023-24192
Online Food Ordering System v2 was discovered to contain a cross-site scripting XSS vulnerability via the redirect parameter in login.php...
CVE-2023-24194
Online Food Ordering System v2 was discovered to contain a cross-site scripting XSS vulnerability via the page parameter in navbar.php...
CVE-2023-24191
Online Food Ordering System v2 was discovered to contain a cross-site scripting XSS vulnerability via the redirect parameter in signup.php...
CVE-2023-24191
Online Food Ordering System v2 was discovered to contain a cross-site scripting XSS vulnerability via the redirect parameter in signup.php...
CVE-2023-24192
Online Food Ordering System v2 was discovered to contain a cross-site scripting XSS vulnerability via the redirect parameter in login.php...