alsalam-restaurant.com XSS vulnerability

Open Bug Bounty ID: OBB-566340 Description| Value ---|--- Affected Website:| alsalam-restaurant.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Friday Squid Blogging: Japanese "Dude Food" Includes Squid

This seems to be a trend. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...

Joomla vRestaurant 1.9.4 SQL Injection

Title: Joomla! vRestaurant 1.9.4 - SQL injection Credit: Bilal KARDADOU Vendor: https://www.wdmtech.com URL: https://extensions.joomla.org/extensions/extension/vertical-markets/food-a-beverage/vrestaurant/ Product: 'Joomla! vRestaurant 1.9.4' Developer: WDMtech Extension type: Plugin Last updated...

Zomato: [www.zomato.com] Privilege Escalation - /php/restaurant_menus_handler.php

Introduction In the following ██████████ the endpoint /php/restaurantmenushandler.php was found. This endpoint is meant solely to be accessible for admins, however due to insufficient protections normal users can access this endpoint too. This results in any Zomato user being able to edit and...

CVE-2017-15993

Zomato Clone Script allows SQL Injection via the restaurant-menu.php resid parameter...

Sql injection

Zomato Clone Script allows SQL Injection via the restaurant-menu.php resid parameter...

CVE-2017-15993

Zomato Clone Script allows SQL Injection via the restaurant-menu.php resid parameter...

CVE-2017-15993

CVE-2017-15993 : Zomato Clone Script is vulnerable to SQL Injection in the restaurant-menu.php resid parameter. The issue allows an attacker to inject SQL commands, potentially revealing or modifying database data. This vulnerability is documented across multiple sources (NVD/CVE records) with hi...

Zomato Clone Script SQL Injection Vulnerability

Zomato Clone Script is a clone script. A SQL injection vulnerability exists in the restaurant-menu.php resid parameter of Zomato Clone Script, which can be exploited by an attacker to access or modify database data...

restaurant-pfannenstiel.ch XSS vulnerability

Vulnerable URL: http://www.restaurant-pfannenstiel.ch/frmkontakt.cfm?Email=info%27%22%3E%3Cimg%20src=x%20onerror=alert%22OPENBUGBOUNTY%22;%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Ale...

restaurantoneandonly.de XSS vulnerability

Vulnerable URL:...

ICRestaurant software 1.4 - key SQL Injection

ICRestaurant software 1.4 - key SQL Injection Exploit Title: Restaurant Site Script 1.4 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/restaurant-site-script.htm Demo: http://icloudcenter.net/demos/icrestaurant/...

ICRestaurant software 1.4 - (key) Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Restaurant Site Script 1.4 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/restaurant-site-script.htm Demo:...

Restaurant Site Script 1.4 - (key) Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Restaurant Site Script 1.4 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/restaurant-site-script.htm Demo:...

ICRestaurant software 1.4 - 'key' SQL Injection

Exploit Title: Restaurant Site Script 1.4 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/restaurant-site-script.htm Demo: http://icloudcenter.net/demos/icrestaurant/ Version: 1.4 Category: Webapps Tested on:...

Restaurant Website Script 1.0 SQL Injection

Exploit Title: Restaurant Website Script 1.0 - SQL Injection Dork: N/A Date: 09.09.2017 Vendor Homepage: http://scriptzee.com/ Software Link: http://scriptzee.com/small-business/restaurant-website-script Demo: http://restaurant.scriptzee.com/ Version: 1.0 Category: Webapps Tested on:...

Restaurant Website Script 1.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Restaurant Website Script 1.0 - SQL Injection Dork: N/A Vendor Homepage: http://scriptzee.com/ Software Link: http://scriptzee.com/small-business/restaurant-website-script Demo: http://restaurant.scriptzee.com/ Version: 1.0...

Zomato: [www.zomato.com] IDOR - Delete/Deactivate any special menu of any Restaurants from Zomato

@prateek0490 was able to delete and deactivate special menu of any restaurant using IDOR Going through the JS, I found another cool function which looked interesting and vulnerable and indeed it was vulnerable - var...

Me on Restaurant Surveillance Technology

I attended the National Restaurant Association exposition in Chicago earlier this year, and looked at all the ways modern restaurant IT is spying on people. But there's also a fundamentally creepy aspect to much of this. One of the prime ways to increase value for your brand is to use the Interne...

Design/Logic Flaw

The Restaurant Karaoke SHIDAX app 1.3.3 and earlier on Android does not verify SSL certificates, which allows remote attackers to obtain sensitive information via a man-in-the-middle attack...