19 matches found
EUVD-2025-29123
Malicious code in bioql PyPI...
CVE-2025-10400
A security vulnerability has been detected in SourceCodester Food Ordering Management System 1.0. Impacted is an unknown function of the file /routers/ticket-message.php. Such manipulation of the argument ticketid leads to sql injection. The attack may be launched remotely. The exploit has been...
CVE-2025-10400
A security vulnerability has been detected in SourceCodester Food Ordering Management System 1.0. Impacted is an unknown function of the file /routers/ticket-message.php. Such manipulation of the argument ticketid leads to sql injection. The attack may be launched remotely. The exploit has been...
CVE-2025-10400
A security vulnerability has been detected in SourceCodester Food Ordering Management System 1.0. Impacted is an unknown function of the file /routers/ticket-message.php. Such manipulation of the argument ticketid leads to sql injection. The attack may be launched remotely. The exploit has been...
CVE-2025-10400 SourceCodester Food Ordering Management System ticket-message.php sql injection
A security vulnerability has been detected in SourceCodester Food Ordering Management System 1.0. Impacted is an unknown function of the file /routers/ticket-message.php. Such manipulation of the argument ticketid leads to sql injection. The attack may be launched remotely. The exploit has been...
CVE-2025-10400
CVE-2025-10400 affects SourceCodester Food Ordering Management System 1.0. The vulnerability is in the /routers/ticket-message.php function handling the ticket_id argument, where improper manipulation leads to SQL injection. Exploitation is possible remotely over a network, and publicly disclosed...
CVE-2025-10400 SourceCodester Food Ordering Management System ticket-message.php sql injection
A security vulnerability has been detected in SourceCodester Food Ordering Management System 1.0. Impacted is an unknown function of the file /routers/ticket-message.php. Such manipulation of the argument ticketid leads to sql injection. The attack may be launched remotely. The exploit has been...
PT-2025-37414
Name of the Vulnerable Software and Affected Versions: SourceCodester Food Ordering Management System version 1.0 Description: A security issue exists in SourceCodester Food Ordering Management System 1.0. The vulnerability is due to SQL injection in an unknown function of the file...
SourceCodester Food Ordering Management System SQL注入漏洞
SourceCodester Food Ordering Management System is a SourceCodester open source food ordering management system. A SQL injection vulnerability exists in SourceCodester Food Ordering Management System version 1.0, which originates from an incorrect manipulation of the ticketid parameter in the file...
CVE-2023-0325
Uvdesk version 1.1.1 allows an unauthenticated remote attacker to exploit a stored XSS in the application. This is possible because the application does not correctly validate the message sent by the clients in the ticket...
CVE-2025-4492
A vulnerability, which was classified as critical, has been found in Campcodes Online Food Ordering System 1.0. This issue affects some unknown processing of the file /routers/ticket-message.php. The manipulation of the argument ticketid leads to sql injection. The attack may be initiated remotel...
CampCodes Online Food Ordering System 安全漏洞
CampCodes Online Food Ordering System is an online food ordering system from CampCodes, Inc. A security vulnerability exists in version 1.0 of the CampCodes Online Food Ordering System, which is caused by SQL injection due to the operation of the ticketid parameter in the file...
CVE-2023-45343
Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'ticketid' parameter of the routers/ticket-message.php resource does not validate the characters received and they are sent unfiltered to the database...
CVE-2023-45343
Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'ticketid' parameter of the routers/ticket-message.php resource does not validate the characters received and they are sent unfiltered to the database...
PT-2023-29519 · Unknown · Online Food Ordering System
Name of the Vulnerable Software and Affected Versions: Online Food Ordering System version 1.0 Description: The Online Food Ordering System is affected by multiple Unauthenticated SQL Injection vulnerabilities. The issue arises from the ticket id parameter of the "routers/ticket-message.php"...
Online Food Ordering System SQL Injection Vulnerability
Online Food Ordering System is an online food ordering system developed by Carlo Montero. A SQL injection vulnerability exists in Online Food Ordering System v1.0, which is caused by insufficient filtering of the ticketid parameter on the routers/ticket-message.php page, resulting in a SQL...
Cross site scripting
Uvdesk version 1.1.1 allows an unauthenticated remote attacker to exploit a stored XSS in the application. This is possible because the application does not correctly validate the message sent by the clients in the ticket...
CVE-2021-33351
Cross Site Scripting Vulnerability in Wyomind Help Desk Magento 2 extension v.1.3.6 and before and fixed in v.1.3.7 allows attackers to escalte privileges via a crafted payload in the ticket message field...
Wyomind Magento 跨站脚本漏洞
Wyomind Magento is a ticketing system from Wyomind. A security vulnerability exists in Wyomind Help Desk Magento 2 extension version v.1.3.6 and prior versions. An attacker can exploit the vulnerability to elevate privileges via a specially crafted payload in the ticket message field...