PT-2022-20011

Name of the Vulnerable Software and Affected Versions oretnom23 Fast Food Ordering System affected versions not specified Description A critical issue was found in the oretnom23 Fast Food Ordering System, affecting some unknown functionality of the file ffos/admin/reports/index.php. The...

CVE-2022-3012: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in oretnom23 Fast Food Ordering System. It has been rated as critical. Affected by this issue is some unknown functionality of the file ffos/admin/reports/index.php. The manipulation of the argument date leads to sql injection. The attack may be launched remotely. The...

PT-2022-21225

Name of the Vulnerable Software and Affected Versions Fast Food Ordering System version 1.0 Description The issue is related to a persistent cross-site scripting XSS vulnerability. This vulnerability is present in the /ffos/classes/Master.php?f=save category component. Recommendations For Fast Fo...

CVE-2022-32318: Improper Neutralization of Input During Web Page Generation

Fast Food Ordering System v1.0 was discovered to contain a persistent cross-site scripting XSS vulnerability via the component /ffos/classes/Master.php?f=savecategory...

CVE-2022-32330

The CVE-2022-32330 entry concerns Fast Food Ordering System v1.0, where a SQL Injection vulnerability exists in Master.php?f=delete_menu. The connected documents clearly identify the affected application/file path and the underlying flaw (input for SQL statements not being validated), indicating ...

PT-2022-21236

Name of the Vulnerable Software and Affected Versions Fast Food Ordering System version 1.0 Description The issue concerns SQL Injection, which can be exploited via the "/ffos/admin/sales/receipt.php?id=" API endpoint. This allows for potential manipulation of database queries by injecting...

PT-2022-21239

Name of the Vulnerable Software and Affected Versions Fast Food Ordering System version 1.0 Description The issue concerns SQL Injection via the "/ffos/admin/menus/view menu.php?id=" endpoint. This allows for potential manipulation of database queries. Recommendations For Fast Food Ordering Syste...

CVE-2022-32335: Improper Neutralization of Special Elements used in an SQL Command

Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/menus/managemenu.php?id=...

CVE-2022-32330: Improper Neutralization of Special Elements used in an SQL Command

Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/classes/Master.php?f=deletemenu...

CVE-2022-32333: Improper Neutralization of Special Elements used in an SQL Command

Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/sales/receipt.php?id=...

CVE-2022-32332: Improper Neutralization of Special Elements used in an SQL Command

Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/classes/Master.php?f=deletecategory...

PT-2022-21233

Name of the Vulnerable Software and Affected Versions Fast Food Ordering System version 1.0 Description The issue concerns a SQL Injection vulnerability via the "/ffos/classes/Master.php?f=delete menu" API endpoint. This allows for potential unauthorized access and manipulation of database conten...

PT-2022-21235

Name of the Vulnerable Software and Affected Versions Fast Food Ordering System version 1.0 Description The issue concerns SQL Injection via the "/ffos/classes/Master.php?f=delete category" API endpoint. This allows for potential manipulation of database queries. No information is provided about...

CVE-2022-32336: Improper Neutralization of Special Elements used in an SQL Command

Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/menus/viewmenu.php?id=...

CVE-2022-32331: Improper Neutralization of Special Elements used in an SQL Command

Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/categories/viewcategory.php?id=...