1602 matches found
CVE-2022-31337
Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/category/index.php?view=edit&id=...
CVE-2022-31338
Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/user/index.php?view=edit&id=...
CVE-2022-31338
The CVE-2022-31338 entry concerns Online Ordering System 2.3.2 with an SQL Injection vulnerability in the admin UI: /ordering/admin/user/index.php?view=edit&id= (lack of input validation). Multiple sources (NVD, CNVD, Red Hat, CNVD, CNNVD, CVE listing) consistently describe an SQLi issue in versi...
Fast Food Ordering System 1.0 Cross Site Scripting
Title: Fast Food Ordering System 1.0 Stored Cross-Site Scripting Author: Ashish Kumar Date: 05.31.2022 Vendor: https://www.sourcecodester.com/users/tips23 Software: https://www.sourcecodester.com/php/15366/fast-food-ordering-system-phpoop-free-source-code.html Reference:...
Online Food Ordering System Arbitrary File Upload Vulnerability
Online Food Ordering System is an online food ordering system. An arbitrary file upload vulnerability exists in Online Food Ordering System version 1.0, which stems from the lack of validation of uploaded files in the Select Image feature, and can be exploited to upload a malicious file that can ...
CVE-2022-29651
An arbitrary file upload vulnerability in the Select Image function of Online Food Ordering System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2022-29650
Online Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the Search parameter at /online-food-order/food-search.php...
Design/Logic Flaw
An arbitrary file upload vulnerability in the Select Image function of Online Food Ordering System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2022-29651
The CVE-2022-29651 entry pertains to Online Food Ordering System v1.0, where an arbitrary file upload vulnerability in the Select Image feature can be exploited by uploading a crafted PHP file to achieve remote code execution. Available sources (NVD/NIST, Red Hat, CNVD, CVE listings) confirm the ...
CVE-2022-29651
An arbitrary file upload vulnerability in the Select Image function of Online Food Ordering System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2022-29650
The CVE-2022-29650 entry concerns Online Food Ordering System v1.0 and a SQL injection in the /online-food-order/food-search.php search parameter. The vulnerability is introduced via the Search input, enabling SQL injection attacks that could affect confidentiality, integrity, and availability ac...
Sourcecodester Gadget Works Online Ordering System in PHP/MySQLi跨站脚本漏洞
Sourcecodester Gadget Works Online Ordering System in PHP/MySQLi is an online ordering system for Gadget Works developed using PHP/MySQLi. The main goal of this online ordering system is to improve customer convenience. Sourcecodester Gadget Works Online Ordering System in PHP/MySQLi 1.0 is...
CVE-2021-34073
A Cross Site Scripting XSS vulnerabilty exists in Sourcecodester Gadget Works Online Ordering System in PHP/MySQLi 1.0 via the Category parameter in an add function in category/index.php...
CVE-2021-34073
A Cross Site Scripting XSS vulnerabilty exists in Sourcecodester Gadget Works Online Ordering System in PHP/MySQLi 1.0 via the Category parameter in an add function in category/index.php...
Cross site scripting
A Cross Site Scripting XSS vulnerabilty exists in Sourcecodester Gadget Works Online Ordering System in PHP/MySQLi 1.0 via the Category parameter in an add function in category/index.php...
CVE-2021-34073
A Cross Site Scripting XSS vulnerabilty exists in Sourcecodester Gadget Works Online Ordering System in PHP/MySQLi 1.0 via the Category parameter in an add function in category/index.php...
CVE-2021-34073
CVE-2021-34073 affects the Sourcecodester Gadget Works Online Ordering System (PHP/MySQLi 1.0). The vulnerability is a Cross Site Scripting (XSS) that originates in the category/index.php add function, exploiting the Category parameter. The connected documents consistently describe this XSS witho...
Sourcecodester Gadget Works Online Ordering System in PHP/MySQLi 跨站脚本漏洞
Sourcecodester Gadget Works Online Ordering System in PHP/MySQLi is an online ordering system for Gadget Works developed using PHP/MySQLi. The main goal of this online ordering system is to improve customer convenience. Sourcecodester Gadget Works Online Ordering System in PHP/MySQLi 1.0 is...
Sourcecodester E-Negosyo System Remote Code Execution Vulnerability
Sourcecodester E-Negosyo System is an open source online ordering system with SMS notifications. sourcecodester E-Negosyo System is vulnerable to remote code execution, which can be exploited by attackers to execute arbitrary code via the "/admin/produts/controller. php" in the doInsert function...