RestApp Online Ordering System 输入验证错误漏洞

RestApp Online Ordering System is an online ordering system from RestApp, Inc. An input validation error vulnerability exists in RestApp Online Ordering System version 04.12.2024 and prior versions, which stems from incorrect input validation...

PT-2024-38378

Name of the Vulnerable Software and Affected Versions RestApp Inc. Online Ordering System version 8.2.1 Description The issue is related to an Improper Input Validation vulnerability that allows Integer Attacks. This vulnerability does not exist in versions prior to 8.2.1 and has been fixed in...

CVE-2024-11970

A vulnerability classified as critical has been found in code-projects Concert Ticket Ordering System 1.0. Affected is an unknown function of the file /tourcor.php. The manipulation of the argument mai leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2024-11970

A vulnerability classified as critical has been found in code-projects Concert Ticket Ordering System 1.0. Affected is an unknown function of the file /tourcor.php. The manipulation of the argument mai leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2024-11970

The CVE-2024-11970 entry concerns code-projects Concert Ticket Ordering System version 1.0. Affected is an unknown function in the file /tour(cor).php where the mai parameter, when manipulated, leads to an SQL injection. The vulnerability can be exploited remotely, and the exploit has been disclo...

CVE-2024-11970 code-projects Concert Ticket Ordering System tour(cor).php sql injection

A vulnerability classified as critical has been found in code-projects Concert Ticket Ordering System 1.0. Affected is an unknown function of the file /tourcor.php. The manipulation of the argument mai leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

PT-2024-17374 · Code Projects · Concert Ticket Ordering System

Name of the Vulnerable Software and Affected Versions: code-projects Concert Ticket Ordering System version 1.0 Description: A critical vulnerability has been found in the Concert Ticket Ordering System. It affects an unknown function of the file /tourcor.php. The manipulation of the mai argument...

CVE-2024-11970: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in code-projects Concert Ticket Ordering System 1.0. Affected is an unknown function of the file /tourcor.php. The manipulation of the argument mai leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2024-9653 Restaurant Menu – Food Ordering System – Table Reservation <= 2.4.2 - Reflected Cross-Site Scripting

The Restaurant Menu – Food Ordering System – Table Reservation plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'action' parameter in all versions up to, and including, 2.4.2 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2024-9653

Restaurant Menu – Food Ordering System – Table Reservation (WordPress)

CVE-2024-9653: Improper Neutralization of Input During Web Page Generation

The Restaurant Menu – Food Ordering System – Table Reservation plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'action' parameter in all versions up to, and including, 2.4.2 due to insufficient input sanitization and output escaping. This makes it possible for...

WordPress Restaurant Menu – Food Ordering System – Table Reservation Plugin <= 2.4.2 is vulnerable to Cross Site Scripting (XSS)

Software Restaurant Menu – Food Ordering System – Table Reservation Type Plugin Vulnerable versions = 2.4.2 Fixed in 2.4.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9653 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership...

CVE-2024-50647

The python_food ordering system V1.0 contains an incorrect authorization vulnerability (CWE-863) that leads to the leakage of sensitive user information. Attackers can exploit this by accessing the /api/myapp/index/user/info?id=1 endpoint and modifying the id parameter to retrieve data beyond the...

CVE-2024-50647

The pythonfood ordering system V1.0 has an unauthorized vulnerability that leads to the leakage of sensitive user information. Attackers can access it through https://ip:port/api/myapp/index/user/info?id=1 And modify the ID value to obtain sensitive user information beyond authorization...

PT-2024-34374 · Unknown · Python Food Ordering System

Name of the Vulnerable Software and Affected Versions: python food ordering system version V1.0 Description: The python food ordering system has an unauthorized vulnerability that leads to the leakage of sensitive user information. Attackers can access it through the...

CVE-2024-50647: Incorrect Authorization

The pythonfood ordering system V1.0 has an unauthorized vulnerability that leads to the leakage of sensitive user information. Attackers can access it through https://ip:port/api/myapp/index/user/info?id=1 And modify the ID value to obtain sensitive user information beyond authorization...

PT-2024-33003 · Digitory · Digitory Multi Channel Integrated Pos

Name of the Vulnerable Software and Affected Versions: Digitory Multi Channel Integrated POS version 1.0 Description: The issue is related to a lack of rate limiting in the OTP validation component, which allows attackers to gain access to the ordering system. This can lead to an excessive amount...

CVE-2024-48143

A lack of rate limiting in the OTP validation component of Digitory Multi Channel Integrated POS v1.0 allows attackers to gain access to the ordering system and place an excessive amount of food orders...

CVE-2024-48143: Improper Restriction of Excessive Authentication Attempts

A lack of rate limiting in the OTP validation component of Digitory Multi Channel Integrated POS v1.0 allows attackers to gain access to the ordering system and place an excessive amount of food orders...

CVE-2024-48143

A lack of rate limiting in the OTP validation component of Digitory Multi Channel Integrated POS v1.0 allows attackers to gain access to the ordering system and place an excessive amount of food orders...