Lucene search
K

5 matches found

CNVD
CNVD
added 2023/01/17 12:0 a.m.11 views

Online Food Ordering System Arbitrary File Upload Vulnerability (CNVD-2023-06523)

Online Food Ordering System is an online food ordering system. Online Food Ordering System suffers from an arbitrary file upload vulnerability, which stems from a lack of validation of the uploaded file in the file /fos/admin/index.php?page=menu of the component Menu Form, and can be exploited by...

9.8CVSS9.7AI score0.00542EPSS
Exploits0References1
OSV
OSV
added 2023/01/12 10:15 p.m.1 views

CVE-2023-0257

A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /fos/admin/index.php?page=menu of the component Menu Form. The manipulation of the argument Image with the input...

9.8CVSS5.8AI score0.00542EPSS
Exploits0References2
NVD
NVD
added 2023/01/12 10:15 p.m.10 views

CVE-2023-0257

A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /fos/admin/index.php?page=menu of the component Menu Form. The manipulation of the argument Image with the input...

9.8CVSS6AI score0.00542EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/01/12 9:9 p.m.15 views

CVE-2023-0257 SourceCodester Online Food Ordering System Menu Form unrestricted upload

A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /fos/admin/index.php?page=menu of the component Menu Form. The manipulation of the argument Image with the input...

5.8CVSS9.7AI score0.00542EPSS
Exploits0References2
securityvulns
securityvulns
added 2005/10/04 12:0 a.m.29 views

Limbo CMS <=1.0.4.2 XSS

Limbo CMS =1.0.4.2 XSS 2005-10-03 12:37:28 bugtaq at lol dot lt Vulnerability type: Permanent XSS Risk: Moderate A malicious HTML tag can be injected through the Contact menu form. A PM can be send, which will later be red by admins. E.g.: scriptalertdocument.cookie/script Information was provide...

Exploits0
Rows per page
Query Builder