CVE-2023-45341

CVE-2023-45341 affects Online Food Ordering System v1.0. The vulnerability is multiple unauthenticated SQL injections in the routers/menu-router.php resource, triggered by the unvalidated and unfiltered characters in the “*_price” parameter that are sent to the database. Root cause: lack of input...

CVE-2023-45341 Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'price' parameter of the routers/menu-router.php resource does not validate the characters received and they are sent unfiltered to the database...