379 matches found
CVE-2023-1358 SourceCodester Gadget Works Online Ordering System POST Parameter login.php sql injection
A vulnerability, which was classified as critical, was found in SourceCodester Gadget Works Online Ordering System 1.0. This affects an unknown part of the file /philosophy/admin/login.php of the component POST Parameter Handler. The manipulation of the argument useremail leads to sql injection. ...
CVE-2023-1358
CVE-2023-1358 affects SourceCodester Gadget Works Online Ordering System 1.0 in the POST Parameter Handler, specifically the /philosophy/admin/login.php file where manipulating the POST parameter (user_email) enables SQL injection. Remote exploitation is possible and exploit details are publicly ...
Online Ordering System 跨站脚本漏洞
Online Ordering System is a multi-store ordering system for janobe individual developers. It can be used for any small business. A cross-site scripting vulnerability exists in SourceCodester Gadget Works Online Ordering System version 1.0, which stems from a problem with the file...
Online Ordering System SQL注入漏洞
Online Ordering System is a multi-store ordering system for janobe individual developers. It can be used for any small business. A SQL injection vulnerability exists in SourceCodester Gadget Works Online Ordering System version 1.0, which stems from a problem in the file...
PT-2023-16926 · Sourcecodester · Sourcecodester Gadget Works Online Ordering System
Name of the Vulnerable Software and Affected Versions: SourceCodester Gadget Works Online Ordering System version 1.0 Description: A vulnerability has been found in the SourceCodester Gadget Works Online Ordering System, affecting the component Add New User. The issue is related to the manipulati...
CVE
CMS source code url: https://www.sourcecodester.com/php/16166/on...
CVE-2023-24197
Online Food Ordering System v2 was discovered to contain a SQL injection vulnerability via the id parameter at vieworder.php...
PT-2023-19471 · Unknown · Online Food Ordering System
Name of the Vulnerable Software and Affected Versions: Online Food Ordering System version v2 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "view order.php" endpoint. Recommendations: For Online Food Ordering...
PT-2023-19467 · Unknown · Online Food Ordering System
Name of the Vulnerable Software and Affected Versions: Online Food Ordering System version v2 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability is present in the redirect parameter in the signup.php file. Recommendations: For Online Food Ordering...
PT-2023-11775 · Unknown · Tourist5 Online-Food-Ordering-System
Name of the Vulnerable Software and Affected Versions: tourist5 Online-food-ordering-system version 1.0 Description: The issue concerns Multiple SQL Injection vulnerabilities. Recommendations: For tourist5 Online-food-ordering-system version 1.0, update to a version that includes a fix for the SQ...
CVE-2022-36759
Online Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the component /dishes.php?resid=...
CVE-2022-36580
An arbitrary file upload vulnerability in the component /admin/products/controller.php?action=add of Online Ordering System v2.3.2 allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2022-36581
Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via the useremail parameter at /admin/login.php...
CVE-2022-36580
An arbitrary file upload vulnerability in the component /admin/products/controller.php?action=add of Online Ordering System v2.3.2 allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2022-36581
Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via the useremail parameter at /admin/login.php...
CVE-2022-36581
Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via the useremail parameter at /admin/login.php...
CVE-2022-36580
An arbitrary file upload vulnerability in the component /admin/products/controller.php?action=add of Online Ordering System v2.3.2 allows attackers to execute arbitrary code via a crafted PHP file...
Privilege escalation
An arbitrary file upload vulnerability in the component /admin/products/controller.php?action=add of Online Ordering System v2.3.2 allows attackers to execute arbitrary code via a crafted PHP file...