CVE-2021-38817-Remote-OS-Command-Injection

CVE-2021-38817-远程操作系统命令注入 TastyIgniter v3.0.7 Sendmail 网页部分中存在经过身份验证的远程操作系统命令注入/远程代码执行漏洞 CVE-2021-38817 TastyIgniter v3.0.7 餐厅CMS的 Sendmail 配置菜单中存在经过身份验证的远程操作系统命令注入漏洞。Sendmail 路径参数未正确清理，如字段中预填的 /usr/sbin/sendmail -bs 命令所示，通过添加分号和额外的操作系统命令可注入任意命令。 受影响组件 URL: /admin/settings/edit/mail 字段: 邮件协议:...

CVE-2021-38699-Stored-XSS

CVE-2021-38699：TastyIgniter v3.0.7 餐厅 CMS 中的存储型 XSS TastyIgniter v3.0.7 餐厅管理系统的 Web 应用系统日志部分存在已认证的存储型跨站脚本漏洞。 https://vulners.com/cve/CVE-2021-38699 POC 1. 在 Web 应用的其他位置执行反射型跨站脚本（参见 https://github.com/HuskyHacks/CVE-2021-38699-Reflected-XSS）。 2. 导航到系统日志部分 3. XSS 载荷应触发。 4. 刷新页面。 5. XSS 载荷应触发。 发现时间...

CVE-2021-39287-Stored-XSS

CVE-2021-39287-Stored-XSS CVE-2021-39287 TastyIgniter v3.0.7 餐厅 CMS 中的存储型 XSS 漏洞 TastyIgniter v3.0.7 餐厅 CMS 中存在一个存储型跨站脚本 XSS 漏洞。位于 /admin/locations/settings 的描述输入字段未正确过滤，允许将任意代码存储在站点内。 受影响组件 URL: /admin/locations/settings 概念验证 POC 向下滚动到 "Descriptions" 输入任意句子和任意代码： "" 保存页面，将会出现一个弹出框，显示句子 All Your...

CVE-2021-38699-Reflected-XSS

CVE-2021-38699：TastyIgniter v3.0.7 餐厅 CMS 中的多处反射型 XSS TastyIgniter 管理后台 3.0.7 版本中存在已认证的反射型 XSS。 https://vulners.com/cve/CVE-2021-38699 POC： 管理后台 dashboard 的 start 参数： root@kitploit: POST http://cvefarm.local/admin/dashboard HTTP/1.1 User-Agent: Mozilla/5.0 X11; Linux x8664; rv:78.0 Gecko/20100101...

EUVD-2018-21657

Wecodex Restaurant CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the username parameter. Attackers can send POST requests to the login endpoint with malicious SQL payloads using boolean-based blin...

CVE-2018-25185

Wecodex Restaurant CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the username parameter. Attackers can send POST requests to the login endpoint with malicious SQL payloads using boolean-based blin...

CVE-2018-25185

Wecodex Restaurant CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the username parameter. Attackers can send POST requests to the login endpoint with malicious SQL payloads using boolean-based blin...

CVE-2018-25185 Wecodex Restaurant CMS 1.0 SQL Injection via Login

Wecodex Restaurant CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the username parameter. Attackers can send POST requests to the login endpoint with malicious SQL payloads using boolean-based blin...

Wecodex Restaurant CMS SQL注入漏洞

Wecodex Restaurant CMS is a catering management system developed by Wecodex Corporation. Version 1.0 of Wecodex Restaurant CMS has a SQL injection vulnerability. This vulnerability stems from insufficient validation of the username parameter input, which may lead to SQL injection attacks...

Wecodex Restaurant CMS 'Login' SQL Injection Vulnerability

Wecodex Restaurant CMS is a management system. A SQL injection vulnerability exists in Wecodex Restaurant CMS 'Login', which can be exploited by attackers to execute arbitrary SQL commands...

Wecodex Restaurant CMS 1.0 SQL Injection

Exploit Title: Wecodex Restaurant CMS 1.0 - 'Login' SQL Injection Dork: N/A Date: 2018-05-23 Exploit Author: Azkan Mustafa AkkuA AkkuS Vendor : Wecodex Solutions Vendor Homepage: https://www.wecodex.com/item/view/restaurant-system-in-php-and-mysql/6 Version: 1.0 Category: Webapps Tested on: Kali...

Wecodex Restaurant CMS 1.0 - Login SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Wecodex Restaurant CMS 1.0 - 'Login' SQL Injection Exploit Author: Özkan Mustafa Akkuş AkkuS Vendor : Wecodex Solutions Vendor Homepage: https://www.wecodex.com/item/view/restaurant-system-in-php-and-mysql/6 Version: 1.0 Categor...

Wecodex Restaurant CMS 1.0 - Login SQL Injection

Wecodex Restaurant CMS 1.0 - Login SQL Injection Exploit Title: Wecodex Restaurant CMS 1.0 - 'Login' SQL Injection Dork: N/A Date: 2018-05-23 Exploit Author: Özkan Mustafa Akkuş AkkuS Vendor : Wecodex Solutions Vendor Homepage: https://www.wecodex.com/item/view/restaurant-system-in-php-and-mysql/...

Restaurant cms getshell vulnerabilities-vulnerability warning-the black bar safety net

Vulnerability type: code execution Keywords: inurl:index. php? m=shopcar The problem is in the/install/index. php file. In the program after the installation, will be in the program root directory generated under the install. lock file. And the/install/index. php in to determine whether there is...

Treat technology restaurant cms vulnerability(getshell)-vulnerability warning-the black bar safety net

The problem is in the/install/index. php file. In the program after the installation, will be in the program root directory generated under the install. lock file. And the/install/index. php in to determine whether there is install. lock when an error occurs. ? php iffileexists"../install. lock"...