Point of Sale - Restaurant POS - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Point of Sale - Restaurant POS published at the 'play' market has multiple vulnerabilities...

"Restaurant Karaoke SHIDAX" App for Android fails to verify SSL server certificates

Overview "Restaurant Karaoke SHIDAX" App for Android fails to verify SSL server certificates. Yasuyuki KOBAYASHI reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact A man-in-the-middle attack may allow an attack...

JVN#68819526: "Restaurant Karaoke SHIDAX" App for Android fails to verify SSL server certificates

"Restaurant Karaoke SHIDAX" App for Android fails to verify SSL server certificates. Impact A man-in-the-middle attack may allow an attacker to eavesdrop on an encrypted communication. Solution Update the Software Update to the latest version according to the information provided by the developer...

Restaurant Biller SQL Injection Vulnerability

Restaurant Biller is an ordering system for the restaurant industry. The system provides features such as a shopping cart, online ordering and viewing the online status of the restaurant. A SQL injection vulnerability exists in Restaurant Biller because the index.php script fails to adequately...

CVE-2015-1450

SQL injection vulnerability in Restaurant Biller allows remote attackers to execute arbitrary SQL commands via the cid parameter in a category action to index.php...

Sql injection

SQL injection vulnerability in Restaurant Biller allows remote attackers to execute arbitrary SQL commands via the cid parameter in a category action to index.php...

CVE-2015-1450

SQL injection vulnerability in Restaurant Biller allows remote attackers to execute arbitrary SQL commands via the cid parameter in a category action to index.php...

CVE-2015-1450

CVE-2015-1450 is a SQL injection vulnerability in Restaurant Biller. The issue arises because the cid parameter in the category action to index.php is not properly filtered, allowing remote attackers to execute arbitrary SQL commands. Affected component: Restaurant Biller category action handling...

PT-2015-5292

Name of the Vulnerable Software and Affected Versions Restaurant Biller affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the cid parameter in a category action to "index.php". Recommendations At the moment, there...

CVE-2015-1450: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Restaurant Biller allows remote attackers to execute arbitrary SQL commands via the cid parameter in a category action to index.php...

CVE-2014-6619

Multiple cross-site scripting XSS vulnerabilities in register-exec.php in Restaurant Script PizzaInnProject 1.0.0 allow remote attackers to inject arbitrary web script or HTML via the 1 fname, 2 lname, or 3 login parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in register-exec.php in Restaurant Script PizzaInnProject 1.0.0 allow remote attackers to inject arbitrary web script or HTML via the 1 fname, 2 lname, or 3 login parameter...

CVE-2014-6619

CVE-2014-6619 stems from multiple stored XSS flaws in the Pizza Inn Restaurant Script (PizzaInn_Project) 1.0.0. The vulnerable file is register-exec.php, with user-supplied input in fname, lname, or login allowing arbitrary script/HTML execution when an administrator views registrations. The affe...

PT-2014-7303

Name of the Vulnerable Software and Affected Versions Restaurant Script PizzaInn Project version 1.0.0 Description The issue allows remote attackers to inject arbitrary web script or HTML via the fname, lname, or login parameters in the register-exec.php file, potentially leading to cross-site...

CVE-2014-6619: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in register-exec.php in Restaurant Script PizzaInnProject 1.0.0 allow remote attackers to inject arbitrary web script or HTML via the 1 fname, 2 lname, or 3 login parameter...

Restaurant Script (PizzaInn Project) - Persistent Cross-Site Scripting

Restaurant Script PizzaInn Project - Persistent Cross-Site Scripting Title: Pizza Inn Registration Stored XSS Severity: High CVE-ID: CVE-2014-6619 Release Date: 20 September 2014 Author: Kenneth F. Belva Websites: http://silverbackventuresllc.com http://xssWarrior.com http://securitymaverick.com...

Keeping your restaurant & hospitality Cardholder Data Environment safe

Reports of new credit card data breaches seem to be in the news daily. Recent high profile breaches within major retailers this year should serve as a wake-up call to the restaurant and hospitality industries. As a result of having high volumes of credit card transactions and decentralized securi...

Restaurant Listing with Online Ordering SQL Injection Vulnerability

No description provided by source. 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ 0 0 \ \ /\ /\ \ \ \ /\ \ \ /\ /\ \ \ \ \ \ \ / 1 1 \ \ \ \\ \ \ /\ \...

Full Site for Restaurant SQL Injection Vulnerability

No description provided by source...

Mambo Component Restaurant 1.0 - Remote SQL Injection Vulnerability

No description provided by source. joomla SQL Injectioncomrestaurant AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DorKs 1 : allinurl: comrestaurant EXPLOIT : index.php?option=comrestaurant&Itemid=S@BUN&func=detail&id=-1//union//select//0,0,password,0,0,0,0,0,0,0,0,0,username//from//mosusers/...