CVE-2023-29849: Improper Neutralization of Special Elements used in an SQL Command

Bang Resto 1.0 was discovered to contain multiple SQL injection vulnerabilities via the btnMenuItemID, itemID, itemPrice, menuID, staffID, or itemqty parameter...

CVE-2023-29849

Bang Resto 1.0 is affected by multiple SQL injection vulnerabilities exploitable through the parameters btnMenuItemID, itemID, itemPrice, menuID, staffID, and itemqty in order-related requests (e.g., staff/displayitem.php). The issue is confirmed across multiple feeds (NVD/Red Hat/Sec databases, ...

CVE-2023-29849

Bang Resto 1.0 was discovered to contain multiple SQL injection vulnerabilities via the btnMenuItemID, itemID, itemPrice, menuID, staffID, or itemqty parameter...

Bangresto 1.0 - SQL Injection

Exploit Title: Bangresto 1.0 - SQL Injection Exploit Author: nu11secur1ty Date: 12.16.2022 Vendor: https://axcora.com/, https://www.hockeycomputindo.com/2021/05/restaurant-pos-source-code-free.html Demo: https://axcora.my.id/bangrestoapp/start.php Software: https://github.com/mesinkasir/bangresto...

Bangresto 1.0 - SQL Injection Vulnerability

Exploit Title: Bangresto 1.0 - SQL Injection Exploit Author: nu11secur1ty Vendor: https://axcora.com/, https://www.hockeycomputindo.com/2021/05/restaurant-pos-source-code-free.html Demo: https://axcora.my.id/bangrestoapp/start.php Software: https://github.com/mesinkasir/bangresto Reference:...

CVE-2022-47780

SQL Injection vulnerability in Bangresto 1.0 via the itemID parameter...

Sql injection

SQL Injection vulnerability in Bangresto 1.0 via the itemID parameter...

Bangresto SQL注入漏洞

Bangresto is a restaurant source code POS by the individual developer Mesin Kasir. A security vulnerability exists in Bangresto version 1.0 that stems from the presence of SQL injection via the itemID parameter...

CVE-2022-47780: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in Bangresto 1.0 via the itemID parameter...

CVE-2022-47780

SQL Injection vulnerability in Bangresto 1.0 via the itemID parameter...

Bangresta 1.0 SQL Injection

Title: Bangresto 1.0 SQLi Author: nu11secur1ty Date: 12.16.2022 Vendor: https://axcora.com/, https://www.hockeycomputindo.com/2021/05/restaurant-pos-source-code-free.html Demo: https://axcora.my.id/bangrestoapp/start.php Software: https://github.com/mesinkasir/bangresto Reference:...

Joomla Vik Rent Car 1.14 Cross Site Scripting

┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An...

CVE-2021-29661

Softing AG OPC Toolbox through 4.10.1.13035 allows /en/diagvalues.html Stored XSS via the ITEMLISTVALUESITEMID parameter, resulting in JavaScript payload injection into the trace file. This payload will then be triggered every time an authenticated user browses the page containing it...

CVE-2021-29661

CVE-2021-29661 affects Softing AG OPC Toolbox prior to or including 4.10.1.13035. The issue is a Stored XSS vulnerability in the page /en/diag_values.html, exploitable via the ITEMLISTVALUES##ITEMID parameter which injects JavaScript into the trace file. The payload is triggered whenever an authe...

Joomla! Component ARI Quiz 3.7.4 - SQL Injection

Joomla! Component ARI Quiz 3.7.4 - SQL Injection Exploit Title: Joomla! Component ARI Quiz 3.7.4 - SQL Injection Exploit Author: Mr Winst0n Author E-mail: [email protected] Discovery Date: April 27, 2019 Vendor Homepage: http://www.ari-soft.com Software Link :...

Joomla Component XMap SQL Injection Vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla component XMap. The flaw is due to input passed to 'index.php' via the 'view=' and 'itemID=' parameters failing to be properly filtered before being used in SQL queries. An attacker could...

thaitsuki.com XSS vulnerability

Vulnerable URL: http://www.thaitsuki.com/item.php?ItemID=4...

Joomla JobGrok Application Component 'Itemid' Parameter SQL Injection Vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'Itemid' parameter of the Joomla JobGrok Application component, which can be exploited by attackers to access or modify database data...

Joomla com_webgrouper component 'Itemid' parameter SQL injection vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'Itemid' parameter of the Joomla comwebgrouper component. An attacker can exploit the vulnerability to access or modify database data...

Joomla com_onlinejudge component 'Itemid' parameter SQL injection vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'Itemid' parameter of the Joomla comonlinejudge component. An attacker can exploit the vulnerability to access or modify database data...