CVE-2023-45331

...

CVE-2023-45331

The connected PT-2023-29506 entry documents a concrete vulnerability in the Online Food Ordering System (version 1.0). The issue is unauthenticated SQL injection in the routers/add-users.php endpoint via the contact parameter, which is not properly validated and sends unfiltered input to the data...