1986 matches found
CVE-2021-34073
A Cross Site Scripting XSS vulnerabilty exists in Sourcecodester Gadget Works Online Ordering System in PHP/MySQLi 1.0 via the Category parameter in an add function in category/index.php...
PT-2022-10310
Name of the Vulnerable Software and Affected Versions Sourcecodester Gadget Works Online Ordering System in PHP/MySQLi version 1.0 Description A Cross Site Scripting XSS issue exists via the Category parameter in an add function in "category/index.php". Recommendations For Sourcecodester Gadget...
CVE-2021-34073: Improper Neutralization of Input During Web Page Generation
A Cross Site Scripting XSS vulnerabilty exists in Sourcecodester Gadget Works Online Ordering System in PHP/MySQLi 1.0 via the Category parameter in an add function in category/index.php...
Sourcecodester Gadget Works Online Ordering System in PHP/MySQLi 跨站脚本漏洞
Sourcecodester Gadget Works Online Ordering System in PHP/MySQLi is an online ordering system for Gadget Works developed using PHP/MySQLi. The main goal of this online ordering system is to improve customer convenience. Sourcecodester Gadget Works Online Ordering System in PHP/MySQLi 1.0 is...
Sourcecodester E-Negosyo System Remote Code Execution Vulnerability
Sourcecodester E-Negosyo System is an open source online ordering system with SMS notifications. sourcecodester E-Negosyo System is vulnerable to remote code execution, which can be exploited by attackers to execute arbitrary code via the "/admin/produts/controller. php" in the doInsert function...
CVE-2021-41644
Remote Code Exection RCE vulnerability exists in Sourcecodester Online Food Ordering System 2.0 via a maliciously crafted PHP file that bypasses the image upload filters...
Remote code execution
Remote Code Exection RCE vulnerability exists in Sourcecodester Online Food Ordering System 2.0 via a maliciously crafted PHP file that bypasses the image upload filters...
CVE-2021-41644
Remote Code Exection RCE vulnerability exists in Sourcecodester Online Food Ordering System 2.0 via a maliciously crafted PHP file that bypasses the image upload filters...
CVE-2021-41644
CVE-2021-41644 affects Sourcecodester Online Food Ordering System 2.0. The vulnerability allows remote code execution through a maliciously crafted PHP file that bypasses image upload filters, enabling an attacker to upload and execute code. NVD reports high to critical severity (CVSS v2 7.5; v3....
PT-2021-23363
Name of the Vulnerable Software and Affected Versions Sourcecodester Online Food Ordering System version 2.0 Description A Remote Code Execution RCE issue exists due to a maliciously crafted PHP file that bypasses the image upload filters, allowing for potential code execution. Recommendations Fo...
CVE-2021-41644: Unrestricted Upload of File with Dangerous Type
Remote Code Exection RCE vulnerability exists in Sourcecodester Online Food Ordering System 2.0 via a maliciously crafted PHP file that bypasses the image upload filters...
Online Food Ordering System 2.0 - Remote Code Execution (Unauthenticated) Exploit
Exploit Title: Online Food Ordering System 2.0 - Remote Code Execution RCE Unauthenticated Exploit Author: Abdullah Khawaja hax.3xploit Vendor Homepage: https://www.sourcecodester.com/php/14951/online-food-ordering-system-php-and-sqlite-database-free-source-code.html Software Link:...
SourceCodester Ordering System Code Issue Vulnerability
SourceCodester Ordering System is a multi-store ordering system. In this system, customers can choose from a wide range of products, such as electronics, fashion apparel, home appliances, etc. A security vulnerability exists in SourceCodester Ordering System 1.0, which can be exploited by attacke...
CVE-2021-25206
Arbitrary file upload vulnerability in SourceCodester Responsive Ordering System v 1.0 allows attackers to execute arbitrary code via the file upload to Productmodel.php...
CVE-2021-25206
Arbitrary file upload vulnerability in SourceCodester Responsive Ordering System v 1.0 allows attackers to execute arbitrary code via the file upload to Productmodel.php...
CVE-2021-25206
SourceCodester Responsive Ordering System v1.0 contains an Arbitrary file upload vulnerability that allows an attacker to execute arbitrary code via uploading a file to Product_model.php. The CVE entry CVE-2021-25206 is supported by multiple sources (NVD, Red Hat, CVE list, CNNVD, PRION, etc.). P...
CVE-2021-25206: Unrestricted Upload of File with Dangerous Type
Arbitrary file upload vulnerability in SourceCodester Responsive Ordering System v 1.0 allows attackers to execute arbitrary code via the file upload to Productmodel.php...
SourceCodester Responsive Ordering System 代码问题漏洞
SourceCodester Responsive Ordering System is an online ordering system. A security vulnerability in SourceCodester Responsive Ordering System v 1.0 allows an attacker to execute arbitrary code by uploading a file to Productmodel.php...
PT-2021-16456
Name of the Vulnerable Software and Affected Versions: SourceCodester Responsive Ordering System version 1.0 Description: The issue allows attackers to execute arbitrary code via the file upload to Product model.php. This can lead to arbitrary file upload, potentially resulting in code execution...