Lucene search
+L

1602 matches found

OSV
OSV
added 2023/02/18 8:15 a.m.3 views

CVE-2023-0902

A vulnerability was found in SourceCodester Simple Food Ordering System 1.0. It has been classified as problematic. This affects an unknown part of the file processorder.php. The manipulation of the argument order leads to cross site scripting. It is possible to initiate the attack remotely. The...

5.4CVSS3.8AI score0.02693EPSS
SaveExploits9References3
NVD
NVD
added 2023/02/18 8:15 a.m.12 views

CVE-2023-0902

A vulnerability was found in SourceCodester Simple Food Ordering System 1.0. It has been classified as problematic. This affects an unknown part of the file processorder.php. The manipulation of the argument order leads to cross site scripting. It is possible to initiate the attack remotely. The...

5.4CVSS4.1AI score0.02693EPSS
SaveExploits9References3
Prion
Prion
added 2023/02/18 8:15 a.m.17 views

Cross site scripting

A vulnerability was found in SourceCodester Simple Food Ordering System 1.0. It has been classified as problematic. This affects an unknown part of the file processorder.php. The manipulation of the argument order leads to cross site scripting. It is possible to initiate the attack remotely. The...

4CVSS5.5AI score0.02693EPSS
SaveExploits9References3Affected Software1
Prion
Prion
added 2023/02/18 8:15 a.m.17 views

Authentication flaw

A vulnerability classified as critical was found in SourceCodester Online Pizza Ordering System 1.0. Affected by this vulnerability is the function deletecategory of the file ajax.php of the component POST Parameter Handler. The manipulation leads to missing authentication. The attack can be...

7.5CVSS9.4AI score0.00658EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2023/02/18 7:41 a.m.52 views

CVE-2023-0906

CVE-2023-0906 affects SourceCodester Online Pizza Ordering System 1.0. The vulnerable element is the function delete_category in the file ajax.php of the component POST Parameter Handler . The manipulation leads to missing authentication and a remote attack surface. Multiple sources classify the ...

9.8CVSS8.6AI score0.00658EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/02/18 7:31 a.m.19 views

CVE-2023-0902 SourceCodester Simple Food Ordering System process_order.php cross site scripting

A vulnerability was found in SourceCodester Simple Food Ordering System 1.0. It has been classified as problematic. This affects an unknown part of the file processorder.php. The manipulation of the argument order leads to cross site scripting. It is possible to initiate the attack remotely. The...

4CVSS6.4AI score0.02693EPSS
SaveExploits9References3
CVE
CVE
added 2023/02/18 7:31 a.m.58 views

CVE-2023-0902

CVE-2023-0902 affects SourceCodester Simple Food Ordering System 1.0. The vulnerability is an input handling flaw in process_order.php that allows cross-site scripting (XSS) via manipulation of an argument, enabling injection of script code in the server response. Multiple sources (NVD and securi...

5.4CVSS4.6AI score0.02693EPSS
SaveExploits9References3Affected Software1
CNNVD
CNNVD
added 2023/02/18 12:0 a.m.29 views

Simple Food Ordering System 跨站脚本漏洞

Simple Food Ordering System is a simple food ordering system by the individual developer Carlo Montero. A cross-site scripting vulnerability exists in Simple Food Ordering System version 1.0, which stems from cross-site scripting due to misuse of the parameter order...

5.4CVSS4.9AI score0.02693EPSS
SaveExploits9References6
Positive Technologies
Positive Technologies
added 2023/02/18 12:0 a.m.8 views

PT-2023-16608 · Unknown · Sourcecodester Online Pizza Ordering System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Pizza Ordering System version 1.0 Description: A critical issue was found in the function delete category of the file ajax.php of the component POST Parameter Handler, leading to missing authentication. The attack can be...

9.8CVSS7AI score0.00658EPSS
SaveExploits0References4
NVD
NVD
added 2023/02/17 9:15 a.m.22 views

CVE-2023-0883

A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. This vulnerability affects unknown code of the file /php-opos/index.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has...

9.8CVSS7.5AI score0.00613EPSS
SaveExploits0References3
OSV
OSV
added 2023/02/17 9:15 a.m.5 views

CVE-2023-0883

A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. This vulnerability affects unknown code of the file /php-opos/index.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has...

9.8CVSS6.6AI score0.00613EPSS
SaveExploits0References3
Prion
Prion
added 2023/02/17 9:15 a.m.21 views

Sql injection

A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. This vulnerability affects unknown code of the file /php-opos/index.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has...

6.5CVSS9.7AI score0.00613EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2023/02/17 8:14 a.m.35 views

CVE-2023-0883 SourceCodester Online Pizza Ordering System index.php sql injection

A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. This vulnerability affects unknown code of the file /php-opos/index.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has...

6.5CVSS10AI score0.00613EPSS
SaveExploits0References3
CVE
CVE
added 2023/02/17 8:14 a.m.51 views

CVE-2023-0883

CVE-2023-0883 affects SourceCodester Online Pizza Ordering System 1.0, due to vulnerable handling of the ID parameter in /php-opos/index.php which enables SQL injection. The issue is exploitable remotely and has been disclosed publicly. Multiple sources corroborate a SQL injection risk in the aff...

9.8CVSS8.3AI score0.00613EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2023/02/17 12:0 a.m.4 views

Online Pizza Ordering System SQL注入漏洞

Online Pizza Ordering System is an online pizza ordering system by Carlo Montero, an individual developer. A SQL injection vulnerability exists in Online Pizza Ordering System version 1.0, which is caused by an incorrect manipulation of a parameter ID that results in an sql injection...

9.8CVSS7.2AI score0.00613EPSS
SaveExploits0References4
GithubExploit
GithubExploit
added 2023/02/16 4:41 p.m.5 views

CVE

CMS source code url: https://www.sourcecodester.com/php/16166/on...

8.7AI score
SaveExploits0
NVD
NVD
added 2023/02/13 9:15 p.m.21 views

CVE-2023-24646

An arbitrary file upload vulnerability in the component /fos/admin/ajax.php of Food Ordering System v2.0 allows attackers to execute arbitrary code via a crafted PHP file...

9.8CVSS9.6AI score0.01071EPSS
SaveExploits1References1
OSV
OSV
added 2023/02/13 9:15 p.m.7 views

CVE-2023-24646

An arbitrary file upload vulnerability in the component /fos/admin/ajax.php of Food Ordering System v2.0 allows attackers to execute arbitrary code via a crafted PHP file...

9.8CVSS7.5AI score0.01071EPSS
SaveExploits1References1
OSV
OSV
added 2023/02/13 9:15 p.m.5 views

CVE-2023-24647

Food Ordering System v2.0 was discovered to contain a SQL injection vulnerability via the email parameter...

7.5CVSS7.2AI score0.00736EPSS
SaveExploits1References1
NVD
NVD
added 2023/02/13 9:15 p.m.21 views

CVE-2023-24647

Food Ordering System v2.0 was discovered to contain a SQL injection vulnerability via the email parameter...

7.5CVSS7.8AI score0.00736EPSS
SaveExploits1References1
Rows per page
Query Builder