Sql injection

Multiple SQL Injection vulnerabilities in tourist5 Online-food-ordering-system 1.0...

CVE-2020-29297

Multiple SQL Injection vulnerabilities in tourist5 Online-food-ordering-system 1.0...

CVE-2020-29297

Multiple SQL Injection vulnerabilities in tourist5 Online-food-ordering-system 1.0...

PT-2023-11775 · Unknown · Tourist5 Online-Food-Ordering-System

Name of the Vulnerable Software and Affected Versions: tourist5 Online-food-ordering-system version 1.0 Description: The issue concerns Multiple SQL Injection vulnerabilities. Recommendations: For tourist5 Online-food-ordering-system version 1.0, update to a version that includes a fix for the SQ...

CVE-2020-29297: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL Injection vulnerabilities in tourist5 Online-food-ordering-system 1.0...

CVE-2020-29297

CVE-2020-29297 : Multiple SQL injection vulnerabilities affect the tourist5 Online-food-ordering-system 1.0. Public data in the connected documents identify the flaw as unsafe SQL query construction leading to unauthorized data access and manipulation. The CVSSv3.1 base metrics are high (9.8, CRI...

CVE-2023-0332

A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been classified as critical. Affected is an unknown function of the file admin/manageuser.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit...

CVE-2023-0332

A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been classified as critical. Affected is an unknown function of the file admin/manageuser.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit...

Sql injection

A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been classified as critical. Affected is an unknown function of the file admin/manageuser.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit...

CVE-2023-0332 SourceCodester Online Food Ordering System manage_user.php sql injection

A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been classified as critical. Affected is an unknown function of the file admin/manageuser.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit...

CVE-2023-0332

CVE-2023-0332 affects SourceCodester Online Food Ordering System 2.0. An SQL injection vulnerability exists in an unknown function of admin/manage_user.php where manipulating the id parameter enables a remote attack. The NVD entry lists a Critical severity (CVSSv3.1 base score 9.8) with network a...

CVE-2023-0332: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been classified as critical. Affected is an unknown function of the file admin/manageuser.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit...

Online Food Ordering System Arbitrary File Upload Vulnerability (CNVD-2023-06523)

Online Food Ordering System is an online food ordering system. Online Food Ordering System suffers from an arbitrary file upload vulnerability, which stems from a lack of validation of the uploaded file in the file /fos/admin/index.php?page=menu of the component Menu Form, and can be exploited by...

CVE-2023-0304

A vulnerability classified as critical has been found in SourceCodester Online Food Ordering System. This affects an unknown part of the file adminclass.php of the component Signup Module. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotel...

CVE-2023-0305

A vulnerability classified as critical was found in SourceCodester Online Food Ordering System. This vulnerability affects unknown code of the file adminclass.php of the component Login Module. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely...

Sql injection

A vulnerability classified as critical has been found in SourceCodester Online Food Ordering System. This affects an unknown part of the file adminclass.php of the component Signup Module. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotel...

CVE-2023-0305 SourceCodester Online Food Ordering System Login Module admin_class.php sql injection

A vulnerability classified as critical was found in SourceCodester Online Food Ordering System. This vulnerability affects unknown code of the file adminclass.php of the component Login Module. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely...

CVE-2023-0305

CVE-2023-0305 affects SourceCodester Online Food Ordering System in the Login Module (admin_class.php). The vulnerability arises from manipulating the username parameter, leading to SQL injection. Remote attack possible; exploit has been publicly disclosed. Multiple connected sources corroborate ...

CVE-2023-0304 SourceCodester Online Food Ordering System Signup Module admin_class.php sql injection

A vulnerability classified as critical has been found in SourceCodester Online Food Ordering System. This affects an unknown part of the file adminclass.php of the component Signup Module. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotel...

CVE-2023-0304

CVE-2023-0304 affects SourceCodester Online Food Ordering System, specifically theSignup Module’s admin_class.php. The vulnerability is an SQL injection triggered by manipulating the email parameter, with remote exploitation and public disclosure of the exploit. Multiple connected sources corrobo...