16 matches found
EUVD-2017-8740
Malware in sbrugna...
A Bootiful Podcast: Grubhub's Josh Burns on Kotlin, Spring Boot, and more
We're crossing the streams, again! This time Josh Long talks to Grubhub's John Burns twitter: @wakingrufus mastodon: @[email protected] about dogfooding human food, Grubhub's tech stack, and more...
Malicious code in @grubhubprod/mochi (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 082e82d92950ed7e74f32c77471c1ff88720343ca31adb94676a844f1dc0a1d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @grubhubprod/cookbook (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cccf2fa688420d82b301bdd7922ba211a5eb00ccbdcf41ee63fcb50e914cad28 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-298 Malicious code in @grubhubprod/cookbook (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cccf2fa688420d82b301bdd7922ba211a5eb00ccbdcf41ee63fcb50e914cad28 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Yelp: I.D.O.R To Order,Book,Buy,reserve On YELP FOR FREE (UNAUTHORIZED USE OF OTHER USER'S CREDIT CARD)
@hk755a found an Insecure Direct Object Reference IDOR Vulnerability that allowed an attacker to pay with someone else's registered credit card, while ordering food with Grubhub through the /checkout/transactionplatform endpoint. No credit card information was disclosed as a result of this...
FS Grubhub Clone SQL Injection Vulnerability
FS Grubhub Clone is a set of PHP-based scripts for online food ordering websites. A SQL injection vulnerability exists in FS Grubhub Clone version 1.0. A remote attacker can exploit this vulnerability to inject SQL commands...
Sql injection
FS Grubhub Clone 1.0 has SQL Injection via the /food keywords parameter...
CVE-2017-17582
FS Grubhub Clone 1.0 has SQL Injection via the /food keywords parameter...
CVE-2017-17582
FS Grubhub Clone 1.0 has SQL Injection via the /food keywords parameter...
CVE-2017-17582
FS Grubhub Clone 1.0 is affected by a SQL Injection vulnerability in the "/food keywords" parameter. CNVD-2017-37407 states a SQL injection exists in FS Grubhub Clone version 1.0, allowing a remote attacker to inject SQL commands. CVE-2017-17582 corroborates this vulnerability. Public references ...
CVE-2017-17582
FS Grubhub Clone 1.0 has SQL Injection via the /food keywords parameter...
CVE-2017-17582: Improper Neutralization of Special Elements used in an SQL Command
FS Grubhub Clone 1.0 has SQL Injection via the /food keywords parameter...
PT-2017-14877
Name of the Vulnerable Software and Affected Versions FS Grubhub Clone version 1.0 Description The issue is related to SQL Injection, which can be exploited via the "keywords" parameter in the /food endpoint. Recommendations For FS Grubhub Clone version 1.0, consider restricting access to the /fo...
