Lucene search
+L

1986 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/14 12:00 a.m.•4 views

CVE-2022-32336: Improper Neutralization of Special Elements used in an SQL Command

Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/menus/viewmenu.php?id=...

9.8CVSS8.3AI score0.01079EPSS
SaveExploits1References2
CNVD
CNVD
•added 2022/06/09 12:00 a.m.•48 views

Online Ordering System SQL Injection Vulnerability (CNVD-2022-55715)

Online Ordering System is a multi-store ordering system that can be used by any small business. version 1.0 of Online Ordering System is vulnerable to a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements on the admin/editproductetails.php page,...

7.2CVSS3.3AI score0.00857EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/06/09 12:00 a.m.•54 views

Online Ordering System SQL Injection Vulnerability (CNVD-2022-55714)

Online Ordering System is a multi-store ordering system that can be used by any small business. version 1.0 of Online Ordering System is vulnerable to a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements on the admin/vieworders.php page, which...

9.8CVSS3.7AI score0.01137EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/06/09 12:00 a.m.•71 views

Online Ordering System SQL Injection Vulnerability (CNVD-2022-55718)

Online Ordering System is a multi-store ordering system that can be used by any small business. SQL statement validation, which can be exploited to execute illegal SQL commands to steal sensitive database data...

9.8CVSS3.4AI score0.01122EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/06/09 12:00 a.m.•48 views

Online Ordering System SQL Injection Vulnerability (CNVD-2022-55716)

Online Ordering System is a multi-store ordering system that can be used by any small business. version 1.0 of Online Ordering System is vulnerable to a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements on the admin/editproductimage.php page,...

7.2CVSS3.3AI score0.01008EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/06/09 12:00 a.m.•60 views

Online Ordering System SQL Injection Vulnerability (CNVD-2022-55720)

Online Ordering System is a multi-store ordering system that can be used by any small business.An SQL injection vulnerability exists in Online Ordering System version 2.3.2, which originates from /ordering/admin/category/index.php?view=edit&id = The page lacks validation of externally entered SQL...

9.8CVSS4.5AI score0.01122EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/06/09 12:00 a.m.•52 views

Online Ordering System SQL Injection Vulnerability (CNVD-2022-55719)

Online Ordering System is a multi-store ordering system that can be used by any small business. version 1.0 of Online Ordering System is vulnerable to a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements on the admin/viewreport.php page, which...

7.2CVSS3.7AI score0.01008EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/06/09 12:00 a.m.•38 views

Online Ordering System SQL Injection Vulnerability (CNVD-2022-55722)

Online Ordering System is a multi-store ordering system that can be used by any small business.An SQL injection vulnerability exists in Online Ordering System version 2.3.2, which originates from /ordering/admin/products/index.php?view=edit&id = The page lacks validation for external input SQL...

9.8CVSS4.6AI score0.01122EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/06/09 12:00 a.m.•46 views

Online Ordering System SQL Injection Vulnerability (CNVD-2022-55724)

Online Ordering System is a multi-store ordering system that can be used by any small business. version 1.0 of Online Ordering System is vulnerable to a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements on the store/orderpage.php page, which cou...

6.5CVSS3.7AI score0.01008EPSS
SaveExploits1Affected Software1
CNVD
CNVD
•added 2022/06/09 12:00 a.m.•78 views

Online Ordering System SQL注入漏洞

Online Ordering System is a multi-store ordering system that can be used by any small business.An SQL injection vulnerability exists in Online Ordering System version 2.3.2, which originates from /ordering/admin/user/index.php?view=edit&id=page The lack of validation of externally entered SQL...

9.8CVSS4.9AI score0.01122EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/06/09 12:00 a.m.•68 views

Online Ordering System SQL Injection Vulnerability (CNVD-2022-55723)

Online Ordering System is a multi-store ordering system that can be used by any small business.An SQL injection vulnerability exists in Online Ordering System version 2.3.2, which originates from /ordering/admin/stockin/index.php?view=edit&id= The page lacks validation of externally entered SQL...

9.8CVSS4.4AI score0.01122EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/06/09 12:00 a.m.•54 views

Online Ordering System SQL Injection Vulnerability (CNVD-2022-55721)

Online Ordering System is a multi-store ordering system that can be used by any small business.Online Ordering System version 2.3.2 is vulnerable to a SQL injection vulnerability that originates in /ordering/index.php?q=products&id=The page lacks validation for external input SQL statements, whic...

9.8CVSS5.8AI score0.01137EPSS
SaveExploits1References1
OSV
OSV
•added 2022/06/07 12:15 p.m.•11 views

CVE-2022-1991

A vulnerability classified as problematic has been found in Fast Food Ordering System 1.0. Affected is the file Master.php of the Master List. The manipulation of the argument Description with the input foo " leads to cross site scripting. It is possible to launch the attack remotely but it...

4.8CVSS4AI score0.00601EPSS
SaveExploits1References2
Prion
Prion
•added 2022/06/07 12:15 p.m.•21 views

Cross site scripting

A vulnerability classified as problematic has been found in Fast Food Ordering System 1.0. Affected is the file Master.php of the Master List. The manipulation of the argument Description with the input foo " leads to cross site scripting. It is possible to launch the attack remotely but it...

3.5CVSS5AI score0.00601EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
•added 2022/06/03 2:25 p.m.•9 views

CVE-2022-1991 Fast Food Ordering System Master List Master.php cross site scripting

A vulnerability classified as problematic has been found in Fast Food Ordering System 1.0. Affected is the file Master.php of the Master List. The manipulation of the argument Description with the input foo " leads to cross site scripting. It is possible to launch the attack remotely but it...

3.5CVSS5.2AI score0.00601EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2022/06/03 2:25 p.m.•39 views

CVE-2022-1991 Fast Food Ordering System Master List Master.php cross site scripting

A vulnerability classified as problematic has been found in Fast Food Ordering System 1.0. Affected is the file Master.php of the Master List. The manipulation of the argument Description with the input foo " leads to cross site scripting. It is possible to launch the attack remotely but it...

3.5CVSS5.2AI score0.00601EPSS
SaveExploits1References2
CVE
CVE
•added 2022/06/03 2:25 p.m.•78 views

CVE-2022-1991

CVE-2022-1991 affects Fast Food Ordering System 1.0, targeting the Master.php Master List. The issue is a cross-site scripting (XSS) vulnerability caused by unsanitized input in the Description parameter (example payload: foo "'>). Exploitation is possible remotely but requires authentication....

4.8CVSS4.4AI score0.00601EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2022/06/03 12:00 a.m.•0 views

PT-2022-14243

Name of the Vulnerable Software and Affected Versions Fast Food Ordering System version 1.0 Description A problematic issue has been discovered, affecting the Master.php file of the Master List. The manipulation of the Description argument with the input foo " leads to cross-site scripting. This...

4.8CVSS0.00601EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/03 12:00 a.m.•8 views

CVE-2022-1991: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in Fast Food Ordering System 1.0. Affected is the file Master.php of the Master List. The manipulation of the argument Description with the input foo " leads to cross site scripting. It is possible to launch the attack remotely but it...

4.8CVSS4AI score0.00601EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2022/06/02 2:15 p.m.•13 views

CVE-2022-31338

Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/user/index.php?view=edit&id=...

9.8CVSS7.4AI score0.01122EPSS
SaveExploits1References2
Rows per page
Query Builder