Online Pizza Ordering System SQL注入漏洞

Online Pizza Ordering System is an online pizza ordering system by Carlo Montero, an individual developer. A security vulnerability exists in Online Pizza Ordering System version 1.0, which is caused by a SQL injection vulnerability via the id parameter in /admin/vieworder.php...

CVE-2023-27211

A cross-site scripting XSS vulnerability in /admin/navbar.php of Online Pizza Ordering System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the page parameter...

PT-2023-21007 · Unknown · Online Pizza Ordering System

Name of the Vulnerable Software and Affected Versions: Online Pizza Ordering System version 1.0 Description: A cross-site scripting XSS issue in the /php-opos/login.php endpoint of the Online Pizza Ordering System allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2023-27211

CVE-2023-27211 affects Online Pizza Ordering System v1.0. The vulnerability is an XSS in the /admin/navbar.php endpoint, exploitable via a crafted payload injected into the page parameter. Affected component: /admin/navbar.php; root cause: insufficient input sanitization leading to script/HTML ex...

CVE-2023-27208

A cross-site scripting XSS vulnerability in /php-opos/login.php of Online Pizza Ordering System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the redirect parameter...

CVE-2023-27210

Online Pizza Ordering System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/vieworder.php...

CVE-2023-27212

A cross-site scripting XSS vulnerability in /php-opos/signup.php of Online Pizza Ordering System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the redirect parameter...

CVE-2023-0988

A vulnerability, which was classified as problematic, has been found in SourceCodester Online Pizza Ordering System 1.0. This issue affects some unknown processing of the file admin/ajax.php?action=saveuser. The manipulation leads to cross-site request forgery. The attack may be initiated remotel...

CVE-2023-0987

A vulnerability classified as problematic was found in SourceCodester Online Pizza Ordering System 1.0. This vulnerability affects unknown code of the file index.php?page=checkout. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed...

Cross site request forgery (csrf)

A vulnerability, which was classified as problematic, has been found in SourceCodester Online Pizza Ordering System 1.0. This issue affects some unknown processing of the file admin/ajax.php?action=saveuser. The manipulation leads to cross-site request forgery. The attack may be initiated remotel...

Cross site scripting

A vulnerability classified as problematic was found in SourceCodester Online Pizza Ordering System 1.0. This vulnerability affects unknown code of the file index.php?page=checkout. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed...

CVE-2023-0988 SourceCodester Online Pizza Ordering System cross-site request forgery

A vulnerability, which was classified as problematic, has been found in SourceCodester Online Pizza Ordering System 1.0. This issue affects some unknown processing of the file admin/ajax.php?action=saveuser. The manipulation leads to cross-site request forgery. The attack may be initiated remotel...

CVE-2023-0988

CVE-2023-0988 affects SourceCodester Online Pizza Ordering System v1.0, where the admin/ajax.php?action=save_user endpoint can be abused to perform CSRF. The issue arises from insufficient protection in processing the save_user request, enabling remote initiation of unauthorized actions without u...

CVE-2023-0988 SourceCodester Online Pizza Ordering System cross-site request forgery

A vulnerability, which was classified as problematic, has been found in SourceCodester Online Pizza Ordering System 1.0. This issue affects some unknown processing of the file admin/ajax.php?action=saveuser. The manipulation leads to cross-site request forgery. The attack may be initiated remotel...

CVE-2023-0987

The CVE-2023-0987 entry concerns SourceCodester Online Pizza Ordering System 1.0 with a cross-site scripting (XSS) vulnerability in index.php?page=checkout. The root cause is improper handling of input leading to XSS; the issue can be triggered remotely and has been publicly disclosed. Multiple c...

CVE-2023-0987 SourceCodester Online Pizza Ordering System cross site scripting

A vulnerability classified as problematic was found in SourceCodester Online Pizza Ordering System 1.0. This vulnerability affects unknown code of the file index.php?page=checkout. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed...

CVE-2023-0910

A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. This vulnerability affects unknown code of the file viewprod.php of the component GET Parameter Handler. The manipulation of the argument ID leads to sql injection. The attack can be...

CVE-2023-0910

A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. This vulnerability affects unknown code of the file viewprod.php of the component GET Parameter Handler. The manipulation of the argument ID leads to sql injection. The attack can be...

CVE-2023-0910

CVE-2023-0910 affects SourceCodester Online Pizza Ordering System 1.0, where the GET Parameter Handler’s view_prod.php is vulnerable. The root cause is manipulation of the ID parameter triggering SQL injection, enabling remote exploitation. NVD lists CVSSv3.1 base score 9.8 (CRITICAL) with NETWOR...

CVE-2023-0910 SourceCodester Online Pizza Ordering System GET Parameter view_prod.php sql injection

A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. This vulnerability affects unknown code of the file viewprod.php of the component GET Parameter Handler. The manipulation of the argument ID leads to sql injection. The attack can be...