Lucene search
+L

1990 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/18 12:00 a.m.•6 views

CVE-2024-32579: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GloriaFood Restaurant Menu – Food Ordering System – Table Reservation allows Stored XSS.This issue affects Restaurant Menu – Food Ordering System – Table Reservation: from n/a through 2.4.1...

6.5CVSS5.8AI score0.0032EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2024/04/16 2:53 p.m.•18 views

WordPress Restaurant Menu – Food Ordering System – Table Reservation plugin <= 2.4.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by wpdabh Patchstack Alliance in WordPress Plugin Restaurant Menu – Food Ordering System – Table Reservation versions = 2.4.1...

6.5CVSS6.1AI score0.0032EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/04/16 12:00 a.m.•24 views

WordPress Restaurant Menu – Food Ordering System – Table Reservation Plugin <= 2.4.1 is vulnerable to Cross Site Scripting (XSS)

Software Restaurant Menu – Food Ordering System – Table Reservation Type Plugin Vulnerable versions = 2.4.1 Fixed in 2.4.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32579 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID e783a9e89164...

6.5CVSS6.6AI score0.0032EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2024/03/19 12:00 a.m.•70 views

CVE-2024-28303

The Open Source Medicine Ordering System v1.0 is vulnerable to a SQL injection flaw caused by improper neutralization of special elements. The vulnerability exists in the date parameter at the /admin/reports/index.php endpoint. Exploitation can lead to unauthorized access or manipulation of the u...

9.8CVSS8.2AI score0.00519EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/03/19 12:00 a.m.•26 views

PT-2024-22386 · Unknown · Open Source Medicine Ordering System

Name of the Vulnerable Software and Affected Versions: Open Source Medicine Ordering System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the date parameter at the "/admin/reports/index.php" API endpoint. Recommendations: F...

9.8CVSS7.4AI score0.00519EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2024/03/19 12:00 a.m.•19 views

Online Medicine Ordering System SQL Injection Vulnerability

Online Medicine Ordering System is an online medicine ordering system by Carlo Montero, an individual developer. A SQL injection vulnerability exists in Online Medicine Ordering System v1.0, which is caused by a SQL injection vulnerability in the date parameter of /admin/reports/index.php...

9.8CVSS8AI score0.00519EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/19 12:00 a.m.•9 views

CVE-2024-28303: Improper Neutralization of Special Elements used in an SQL Command

Open Source Medicine Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the date parameter at /admin/reports/index.php...

9.8CVSS5.8AI score0.00519EPSS
SaveExploits0References2
NVD
NVD
•added 2024/02/14 3:15 p.m.•18 views

CVE-2024-25217

Online Medicine Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /omos/?p=products/viewproduct...

9.8CVSS7.8AI score0.0069EPSS
SaveExploits1References1
CVE
CVE
•added 2024/02/14 12:00 a.m.•95 views

CVE-2024-25217

CVE-2024-25217 corresponds to a SQL injection vulnerability in Online Medicine Ordering System v1.0, exploitable through the id parameter in /omos/?p=products/view_product. Connected sources repeatedly confirm the issue is SQL injection with potential for high impact on confidentiality, integrity...

9.8CVSS8.1AI score0.0069EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2024/02/14 12:00 a.m.•35 views

CVE-2024-25217

Online Medicine Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /omos/?p=products/viewproduct...

8.1AI score0.0069EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/02/14 12:00 a.m.•23 views

CVE-2024-25217

Online Medicine Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /omos/?p=products/viewproduct...

8.5AI score0.0069EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/14 12:00 a.m.•8 views

CVE-2024-25217: Improper Neutralization of Special Elements used in an SQL Command

Online Medicine Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /omos/?p=products/viewproduct...

9.8CVSS5.8AI score0.0069EPSS
SaveExploits1References3
NVD
NVD
•added 2024/01/11 8:15 p.m.•42 views

CVE-2024-0423

A vulnerability was found in CodeAstro Online Food Ordering System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file dishes.php. The manipulation of the argument resid leads to cross site scripting. The attack may be launched remotely. The...

5.4CVSS4.2AI score0.00533EPSS
SaveExploits1References3
Prion
Prion
•added 2024/01/11 8:15 p.m.•34 views

Cross site scripting

A vulnerability was found in CodeAstro Online Food Ordering System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file dishes.php. The manipulation of the argument resid leads to cross site scripting. The attack may be launched remotely. The...

4CVSS6.4AI score0.00533EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2024/01/11 7:31 p.m.•54 views

CVE-2024-0423 CodeAstro Online Food Ordering System dishes.php cross site scripting

A vulnerability was found in CodeAstro Online Food Ordering System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file dishes.php. The manipulation of the argument resid leads to cross site scripting. The attack may be launched remotely. The...

4CVSS5.4AI score0.00533EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2024/01/11 7:31 p.m.•15 views

CVE-2024-0423 CodeAstro Online Food Ordering System dishes.php cross site scripting

A vulnerability was found in CodeAstro Online Food Ordering System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file dishes.php. The manipulation of the argument resid leads to cross site scripting. The attack may be launched remotely. The...

4CVSS6.2AI score0.00533EPSS
SaveExploits1References3
CVE
CVE
•added 2024/01/11 7:31 p.m.•85 views

CVE-2024-0423

CVE-2024-0423 affects CodeAstro Online Food Ordering System v1.0. The vulnerability is in the dishes.php functionality, where manipulation of the res_id parameter causes cross-site scripting. It may be exploited remotely and the public exploit has been disclosed. Remediation details are not provi...

5.4CVSS5.2AI score0.00533EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/11 12:00 a.m.•7 views

CVE-2024-0423: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in CodeAstro Online Food Ordering System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file dishes.php. The manipulation of the argument resid leads to cross site scripting. The attack may be launched remotely. The...

5.4CVSS3.6AI score0.00533EPSS
SaveExploits1References2
OSV
OSV
•added 2024/01/05 7:15 p.m.•14 views

CVE-2024-0247

A vulnerability classified as critical was found in CodeAstro Online Food Ordering System 1.0. This vulnerability affects unknown code of the file /admin/ of the component Admin Panel. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The...

9.8CVSS5.7AI score0.00779EPSS
SaveExploits1References3
NVD
NVD
•added 2024/01/05 7:15 p.m.•37 views

CVE-2024-0247

A vulnerability classified as critical was found in CodeAstro Online Food Ordering System 1.0. This vulnerability affects unknown code of the file /admin/ of the component Admin Panel. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The...

9.8CVSS8.2AI score0.00779EPSS
SaveExploits1References3
Rows per page
Query Builder