Lucene search
+L

1986 matches found

Cvelist
Cvelist
•added 2022/01/28 4:25 p.m.•35 views

CVE-2021-34073

A Cross Site Scripting XSS vulnerabilty exists in Sourcecodester Gadget Works Online Ordering System in PHP/MySQLi 1.0 via the Category parameter in an add function in category/index.php...

5.5AI score0.00583EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2022/01/28 12:00 a.m.•4 views

PT-2022-10310

Name of the Vulnerable Software and Affected Versions Sourcecodester Gadget Works Online Ordering System in PHP/MySQLi version 1.0 Description A Cross Site Scripting XSS issue exists via the Category parameter in an add function in "category/index.php". Recommendations For Sourcecodester Gadget...

5.4CVSS0.00583EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/28 12:00 a.m.•7 views

CVE-2021-34073: Improper Neutralization of Input During Web Page Generation

A Cross Site Scripting XSS vulnerabilty exists in Sourcecodester Gadget Works Online Ordering System in PHP/MySQLi 1.0 via the Category parameter in an add function in category/index.php...

5.4CVSS5.9AI score0.00583EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/01/28 12:00 a.m.•16 views

Sourcecodester Gadget Works Online Ordering System in PHP/MySQLi 跨站脚本漏洞

Sourcecodester Gadget Works Online Ordering System in PHP/MySQLi is an online ordering system for Gadget Works developed using PHP/MySQLi. The main goal of this online ordering system is to improve customer convenience. Sourcecodester Gadget Works Online Ordering System in PHP/MySQLi 1.0 is...

5.4CVSS5.2AI score0.00583EPSS
SaveExploits1References2
CNVD
CNVD
•added 2021/11/03 12:00 a.m.•28 views

Sourcecodester E-Negosyo System Remote Code Execution Vulnerability

Sourcecodester E-Negosyo System is an open source online ordering system with SMS notifications. sourcecodester E-Negosyo System is vulnerable to remote code execution, which can be exploited by attackers to execute arbitrary code via the "/admin/produts/controller. php" in the doInsert function...

7.2CVSS8AI score0.03145EPSS
SaveExploits1References1
NVD
NVD
•added 2021/10/29 5:15 p.m.•25 views

CVE-2021-41644

Remote Code Exection RCE vulnerability exists in Sourcecodester Online Food Ordering System 2.0 via a maliciously crafted PHP file that bypasses the image upload filters...

9.8CVSS0.02498EPSS
SaveExploits1References1
Prion
Prion
•added 2021/10/29 5:15 p.m.•27 views

Remote code execution

Remote Code Exection RCE vulnerability exists in Sourcecodester Online Food Ordering System 2.0 via a maliciously crafted PHP file that bypasses the image upload filters...

7.5CVSS9.5AI score0.02498EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2021/10/29 4:55 p.m.•38 views

CVE-2021-41644

Remote Code Exection RCE vulnerability exists in Sourcecodester Online Food Ordering System 2.0 via a maliciously crafted PHP file that bypasses the image upload filters...

9.8AI score0.02498EPSS
SaveExploits1References1
CVE
CVE
•added 2021/10/29 4:55 p.m.•74 views

CVE-2021-41644

CVE-2021-41644 affects Sourcecodester Online Food Ordering System 2.0. The vulnerability allows remote code execution through a maliciously crafted PHP file that bypasses image upload filters, enabling an attacker to upload and execute code. NVD reports high to critical severity (CVSS v2 7.5; v3....

9.8CVSS9.5AI score0.02498EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2021/10/29 12:00 a.m.•7 views

PT-2021-23363

Name of the Vulnerable Software and Affected Versions Sourcecodester Online Food Ordering System version 2.0 Description A Remote Code Execution RCE issue exists due to a maliciously crafted PHP file that bypasses the image upload filters, allowing for potential code execution. Recommendations Fo...

9.8CVSS0.02498EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/29 12:00 a.m.•6 views

CVE-2021-41644: Unrestricted Upload of File with Dangerous Type

Remote Code Exection RCE vulnerability exists in Sourcecodester Online Food Ordering System 2.0 via a maliciously crafted PHP file that bypasses the image upload filters...

9.8CVSS5.9AI score0.02498EPSS
SaveExploits1References2
zdt
zdt
•added 2021/09/20 12:00 a.m.•216 views

Online Food Ordering System 2.0 - Remote Code Execution (Unauthenticated) Exploit

Exploit Title: Online Food Ordering System 2.0 - Remote Code Execution RCE Unauthenticated Exploit Author: Abdullah Khawaja hax.3xploit Vendor Homepage: https://www.sourcecodester.com/php/14951/online-food-ordering-system-php-and-sqlite-database-free-source-code.html Software Link:...

0.1AI score
SaveExploits0
CNVD
CNVD
•added 2021/07/30 12:00 a.m.•47 views

SourceCodester Ordering System Code Issue Vulnerability

SourceCodester Ordering System is a multi-store ordering system. In this system, customers can choose from a wide range of products, such as electronics, fashion apparel, home appliances, etc. A security vulnerability exists in SourceCodester Ordering System 1.0, which can be exploited by attacke...

9.8CVSS5.3AI score0.01874EPSS
SaveExploits1References1
NVD
NVD
•added 2021/07/23 2:15 p.m.•22 views

CVE-2021-25206

Arbitrary file upload vulnerability in SourceCodester Responsive Ordering System v 1.0 allows attackers to execute arbitrary code via the file upload to Productmodel.php...

9.8CVSS0.01874EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2021/07/23 2:15 p.m.•8 views

CVE-2021-25206

Arbitrary file upload vulnerability in SourceCodester Responsive Ordering System v 1.0 allows attackers to execute arbitrary code via the file upload to Productmodel.php...

9.8CVSS9AI score0.01874EPSS
SaveExploits1References2
CVE
CVE
•added 2021/07/23 1:15 p.m.•84 views

CVE-2021-25206

SourceCodester Responsive Ordering System v1.0 contains an Arbitrary file upload vulnerability that allows an attacker to execute arbitrary code via uploading a file to Product_model.php. The CVE entry CVE-2021-25206 is supported by multiple sources (NVD, Red Hat, CVE list, CNNVD, PRION, etc.). P...

9.8CVSS9.6AI score0.01874EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/23 12:00 a.m.•8 views

CVE-2021-25206: Unrestricted Upload of File with Dangerous Type

Arbitrary file upload vulnerability in SourceCodester Responsive Ordering System v 1.0 allows attackers to execute arbitrary code via the file upload to Productmodel.php...

9.8CVSS6.5AI score0.01874EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/07/23 12:00 a.m.•17 views

SourceCodester Responsive Ordering System 代码问题漏洞

SourceCodester Responsive Ordering System is an online ordering system. A security vulnerability in SourceCodester Responsive Ordering System v 1.0 allows an attacker to execute arbitrary code by uploading a file to Productmodel.php...

9.8CVSS8.8AI score0.01874EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/07/23 12:00 a.m.•4 views

PT-2021-16456

Name of the Vulnerable Software and Affected Versions: SourceCodester Responsive Ordering System version 1.0 Description: The issue allows attackers to execute arbitrary code via the file upload to Product model.php. This can lead to arbitrary file upload, potentially resulting in code execution...

9.8CVSS0.01874EPSS
SaveExploits1References4
OSV
OSV
•added 2021/07/22 8:15 p.m.•14 views

CVE-2021-25211

Arbitrary file upload vulnerability in SourceCodester Ordering System v 1.0 allows attackers to execute arbitrary code, via the file upload to ordering\admin\products\edit.php...

9.8CVSS6AI score0.01874EPSS
SaveExploits1References1
Rows per page
Query Builder