CVE-2023-24194

Online Food Ordering System v2 was discovered to contain a cross-site scripting XSS vulnerability via the page parameter in navbar.php...

Cross site scripting

Online Food Ordering System v2 was discovered to contain a cross-site scripting XSS vulnerability via the redirect parameter in signup.php...

Cross site scripting

Online Food Ordering System v2 was discovered to contain a cross-site scripting XSS vulnerability via the redirect parameter in login.php...

Sql injection

Online Food Ordering System v2 was discovered to contain a SQL injection vulnerability via the id parameter at vieworder.php...

Cross site scripting

Online Food Ordering System v2 was discovered to contain a cross-site scripting XSS vulnerability via the page parameter in navbar.php...

Cross site scripting

Online Food Ordering System v2 was discovered to contain a cross-site scripting XSS vulnerability via the page parameter in index.php...

Online Food Ordering System 跨站脚本漏洞

Online Food Ordering System is an online food ordering system. A cross-site scripting vulnerability exists in Online Food Ordering System, which is caused by a lack of effective filtering and escaping of user-supplied data in the page parameter of index.php page, which can be exploited by attacke...

CVE-2023-24195: Improper Neutralization of Input During Web Page Generation

Online Food Ordering System v2 was discovered to contain a cross-site scripting XSS vulnerability via the page parameter in index.php...

CVE-2023-24192

Online Food Ordering System v2 was discovered to contain a cross-site scripting XSS vulnerability via the redirect parameter in login.php...

CVE-2023-24197

Online Food Ordering System v2 was discovered to contain a SQL injection vulnerability via the id parameter at vieworder.php...

CVE-2023-24194

Online Food Ordering System v2 was discovered to contain a cross-site scripting XSS vulnerability via the page parameter in navbar.php...

PT-2023-19471 · Unknown · Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: Online Food Ordering System version v2 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "view order.php" endpoint. Recommendations: For Online Food Ordering...

PT-2023-19469 · Unknown · Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: Online Food Ordering System version v2 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability is present in the page parameter in the navbar.php file. Cross-site scripting XSS is a type of security...

CVE-2023-24191

Online Food Ordering System v2 was discovered to contain a cross-site scripting XSS vulnerability via the redirect parameter in signup.php...

CVE-2023-24197: Improper Neutralization of Input During Web Page Generation

Online Food Ordering System v2 was discovered to contain a SQL injection vulnerability via the id parameter at vieworder.php...

CVE-2023-24194: Improper Neutralization of Input During Web Page Generation

Online Food Ordering System v2 was discovered to contain a cross-site scripting XSS vulnerability via the page parameter in navbar.php...

CVE-2023-24195

Online Food Ordering System v2 was discovered to contain a cross-site scripting XSS vulnerability via the page parameter in index.php...

CVE-2023-24191

CVE-2023-24191 affects Online Food Ordering System v2, with a cross-site scripting (XSS) vulnerability triggered by the redirect parameter in signup.php. The CVSS 3.1 vector indicates Network attack, Low attack complexity, No privileges, User interaction required, and a Changed scope with Low imp...

CVE-2023-24192: Improper Neutralization of Input During Web Page Generation

Online Food Ordering System v2 was discovered to contain a cross-site scripting XSS vulnerability via the redirect parameter in login.php...

CVE-2023-24197

CVE-2023-24197 concerns Online Food Ordering System v2, where a SQL injection exists in the view_order.php endpoint via the id parameter. The root cause is insufficient validation of externally supplied SQL statements, allowing potentially unauthorized database access and data exposure as indicat...