CVE-2019-18415

Sourcecodester Restaurant Management System 1.0 allows XSS via the "send a message" screen...

CVE-2019-18414

Sourcecodester Restaurant Management System 1.0 is affected by an admin/staff-exec.php Cross Site Request Forgery vulnerability due to a lack of CSRF protection. This could lead to an attacker tricking the administrator into executing arbitrary code or adding a staff entry via a crafted HTML page...

CVE-2019-18416

Sourcecodester Restaurant Management System 1.0 allows XSS via the Last Name field of a member...

CVE-2019-18417

Sourcecodester Restaurant Management System 1.0 allows an authenticated attacker to upload arbitrary files that can result in code execution. The issue occurs because the application fails to adequately sanitize user-supplied input, e.g., "add a new food" allows .php files...

CVE-2019-18415: Improper Neutralization of Input During Web Page Generation

Sourcecodester Restaurant Management System 1.0 allows XSS via the "send a message" screen...

CVE-2019-18414: Cross-Site Request Forgery (CSRF)

Sourcecodester Restaurant Management System 1.0 is affected by an admin/staff-exec.php Cross Site Request Forgery vulnerability due to a lack of CSRF protection. This could lead to an attacker tricking the administrator into executing arbitrary code or adding a staff entry via a crafted HTML page...

CVE-2019-18417: Unrestricted Upload of File with Dangerous Type

Sourcecodester Restaurant Management System 1.0 allows an authenticated attacker to upload arbitrary files that can result in code execution. The issue occurs because the application fails to adequately sanitize user-supplied input, e.g., "add a new food" allows .php files...

CVE-2019-18416: Improper Neutralization of Input During Web Page Generation

Sourcecodester Restaurant Management System 1.0 allows XSS via the Last Name field of a member...

Sourcecodester Restaurant Management System Cross-Site Scripting Vulnerability

Sourcecodester Restaurant Management System is a restaurant management system. A cross-site scripting vulnerability exists in the Sourcecodester Restaurant Management System version 1.0, which stems from the lack of proper validation of client-side data in the web application and can be exploited...