asian-restaurant.focus.tv Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1029664 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

Sale of 4 Million Stolen Cards Tied to Breaches at 4 Restaurant Chains

On Nov. 23, one of the cybercrime underground's largest bazaars for buying and selling stolen payment card data announced the immediate availability of some four million freshly-hacked debit and credit cards. KrebsOnSecurity has learned this latest batch of cards was siphoned from four different...

Sourcecodester Restaurant Management System Cross-Site Request Forgery Vulnerability

Sourcecodester Restaurant Management System is a restaurant management system. A cross-site request forgery vulnerability exists in the admin/staff-exec.php file in version 1.0 of the Sourcecodester Restaurant Management System, which originates from a WEB application that does not adequately...

Sourcecodester Restaurant Management System Cross-Site Scripting Vulnerability (CNVD-2019-39588)

Sourcecodester Restaurant Management System is a restaurant management system. A cross-site scripting vulnerability exists in the Sourcecodester Restaurant Management System version 1.0, which stems from the lack of proper validation of client-side data in the web application and can be exploited...

CVE-2019-18414

Sourcecodester Restaurant Management System 1.0 is affected by an admin/staff-exec.php Cross Site Request Forgery vulnerability due to a lack of CSRF protection. This could lead to an attacker tricking the administrator into executing arbitrary code or adding a staff entry via a crafted HTML page...

CVE-2019-18417

Sourcecodester Restaurant Management System 1.0 allows an authenticated attacker to upload arbitrary files that can result in code execution. The issue occurs because the application fails to adequately sanitize user-supplied input, e.g., "add a new food" allows .php files...

CVE-2019-18417

Sourcecodester Restaurant Management System 1.0 allows an authenticated attacker to upload arbitrary files that can result in code execution. The issue occurs because the application fails to adequately sanitize user-supplied input, e.g., "add a new food" allows .php files...

CVE-2019-18416

Sourcecodester Restaurant Management System 1.0 allows XSS via the Last Name field of a member...

CVE-2019-18415

Sourcecodester Restaurant Management System 1.0 allows XSS via the "send a message" screen...

CVE-2019-18416

Sourcecodester Restaurant Management System 1.0 allows XSS via the Last Name field of a member...

CVE-2019-18414

Sourcecodester Restaurant Management System 1.0 is affected by an admin/staff-exec.php Cross Site Request Forgery vulnerability due to a lack of CSRF protection. This could lead to an attacker tricking the administrator into executing arbitrary code or adding a staff entry via a crafted HTML page...

CVE-2019-18415

Sourcecodester Restaurant Management System 1.0 allows XSS via the "send a message" screen...

Cross site request forgery (csrf)

Sourcecodester Restaurant Management System 1.0 is affected by an admin/staff-exec.php Cross Site Request Forgery vulnerability due to a lack of CSRF protection. This could lead to an attacker tricking the administrator into executing arbitrary code or adding a staff entry via a crafted HTML page...

Cross site scripting

Sourcecodester Restaurant Management System 1.0 allows XSS via the "send a message" screen...

Remote code execution

Sourcecodester Restaurant Management System 1.0 allows an authenticated attacker to upload arbitrary files that can result in code execution. The issue occurs because the application fails to adequately sanitize user-supplied input, e.g., "add a new food" allows .php files...

Cross site scripting

Sourcecodester Restaurant Management System 1.0 allows XSS via the Last Name field of a member...

CVE-2019-18415

The CVE-2019-18415 entry affects Sourcecodester Restaurant Management System 1.0. It is described as a cross-site scripting (XSS) vulnerability exploitable via the "send a message" screen. Several sources attribute the issue to insufficient validation of client-side data, leading to execution of ...

CVE-2019-18417

CVE-2019-18417 affects Sourcecodester Restaurant Management System 1.0. An authenticated attacker can upload arbitrary files (e.g., PHP) due to inadequate input sanitization, enabling code execution. Multiple sources (NVD entry and Red Hat advisory) confirm the issue, with impact described as hig...

CVE-2019-18417

Sourcecodester Restaurant Management System 1.0 allows an authenticated attacker to upload arbitrary files that can result in code execution. The issue occurs because the application fails to adequately sanitize user-supplied input, e.g., "add a new food" allows .php files...

CVE-2019-18416

CVE-2019-18416 affects Sourcecodester Restaurant Management System 1.0. The vulnerability is a cross-site scripting (XSS) flaw exploitable via the Last Name field of a member, enabling potential execution of client-side scripts. Documents consistently describe the impact as XSS but do not provide...