CVE-2024-13070

creationtimestamp| type| source ---|---|--- 2024-12-31 14:35:38+00:00| seen| https://infosec.exchange/users/cve/statuses/113747934429813549 2024-12-31 15:15:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lemdnc6usk22 2024-12-31 17:03:40+00:00| seen|...

CVE-2024-13070

The CVE-2024-13070 entry concerns CodeAstro Online Food Ordering System 1.0. The vulnerability is described as a SQL injection in the Update User Page, specifically the /admin/update_users.php functionality, where manipulating the argument (user_upd or similar) enables remote exploitation. Multip...