CVE-2022-30015: Improper Neutralization of Input During Web Page Generation

In Simple Food Website 1.0, a moderation can put the Cross Site Scripting Payload in any of the fields on http://127.0.0.1:1234/food/admin/allusers.php like Full Username, etc .This causes stored xss...

CVE-2022-30014: Cross-Site Request Forgery (CSRF)

Lumidek Associates Simple Food Website 1.0 is vulnerable to Cross Site Request Forgery CSRF which allows anyone to takeover admin/moderater account...

Lumidek Associates Simple Food Website 跨站脚本漏洞

Lumidek Associates Simple Food Website is Simple Food Website CMS. A cross-site scripting vulnerability exists in Lumidek Associates Simple Food Website 1.0, which stems from a lack of filtering and escaping of field data in food/admin/allusers.php. The vulnerability can be exploited to conduct a...

PT-2022-19971

Name of the Vulnerable Software and Affected Versions Simple Food Website version 1.0 Description The issue allows a moderation to inject a Cross Site Scripting Payload in various fields on the 'http://127.0.0.1:1234/food/admin/all users.php' page, such as the Full Username field, resulting in...

PT-2022-19970

Name of the Vulnerable Software and Affected Versions Lumidek Associates Simple Food Website version 1.0 Description The issue allows anyone to take over admin or moderator accounts due to Cross Site Request Forgery CSRF. This means an attacker can perform actions on behalf of the admin or...

SourceCodester Simple Food Website SQL Injection Vulnerability

SourceCodester Simple Food Website is a CMS by SourceCodester, Inc. developed using PHP and MySQL database. sourcecodester Basic Shopping Cart is vulnerable to SQL injection, which can be exploited by attackers to bypass authentication Become an administrator...

CVE-2021-34166

A SQL INJECTION vulnerability in Sourcecodester Simple Food Website 1.0 allows a remote attacker to Bypass Authentication and become Admin...

CVE-2021-34166

A SQL INJECTION vulnerability in Sourcecodester Simple Food Website 1.0 allows a remote attacker to Bypass Authentication and become Admin...

Sql injection

A SQL INJECTION vulnerability in Sourcecodester Simple Food Website 1.0 allows a remote attacker to Bypass Authentication and become Admin...

SourceCodester Simple Food Website SQL注入漏洞

SourceCodester Simple Food Website is a CMS by SourceCodester, Inc. developed using PHP and MySQL database. sourcecodester Basic Shopping Cart is vulnerable to SQL injection, which can be exploited by attackers to bypass authentication Become an administrator...

CVE-2021-34166

CVE-2021-34166 concerns Sourcecodester Simple Food Website 1.0, where a SQL injection vulnerability in the application enables a remote attacker to bypass authentication and gain admin privileges. The NVD entry documents a high/critical impact profile (CVSS v3.1: 9.8, sequence NETWORK/LOW complex...

CVE-2021-34166

A SQL INJECTION vulnerability in Sourcecodester Simple Food Website 1.0 allows a remote attacker to Bypass Authentication and become Admin...

CVE-2021-34166: Improper Neutralization of Special Elements used in an SQL Command

A SQL INJECTION vulnerability in Sourcecodester Simple Food Website 1.0 allows a remote attacker to Bypass Authentication and become Admin...

PT-2021-20389

Name of the Vulnerable Software and Affected Versions: Sourcecodester Simple Food Website version 1.0 Description: A SQL injection issue allows a remote attacker to bypass authentication and gain administrative access. Recommendations: For Sourcecodester Simple Food Website version 1.0, update th...