CVE-2020-35309

CVE-2020-35309 affects the Bakeshop Online Ordering System in PHP/MySQLi 1.0. The vulnerability is described as cross-site scripting (XSS) that allows remote attackers to inject arbitrary web script or HTML in the admin dashboard, specifically under “Categories.” The connected documents do not pr...

SQL Injection Vulnerability in the Backend of Online Food Ordering System of Shenzhen Dianhang Technology Development Co.

Ltd. is a one-card system and product provider, offering attendance system, ordering system, consumption system, access control system products and services. There is a SQL injection vulnerability in the backend of the online food ordering system of Shenzhen Dianhang Technology Development Co. An...

SQL Injection Vulnerability in the Backend of Online Food Ordering System of Shenzhen Dianhang Technology Development Company Limited (CNVD-2021-04846)

Ltd. is a one-card system and product provider, offering attendance system, food ordering system, consumption system, access control system products and services. There is a SQL injection vulnerability in the backend of the online food ordering system of Shenzhen Dianhang Technology Development C...

SQL Injection Vulnerability in the Backend of Online Food Ordering System of Shenzhen Dianhang Science and Technology Development Co.

Ltd. is a one-card system and product provider, offering attendance system, food ordering system, consumption system, access control system products and services. There is a SQL injection vulnerability in the backend of the online food ordering system of Shenzhen Dianhang Technology Development C...

SQL Injection Vulnerability in the Frontend of Food Ordering Management System of Guangzhou Guowan Electronic Technology Co.

Ltd. ordering system is made for the local area network network ordering system, which is mainly applicable to small and medium-sized enterprises, institutions, hospitals, schools and other organizations to order food. Guangzhou Guowan Electronic Technology Co., Ltd. ordering management system in...

SQL Injection Vulnerability in Food Ordering System of Guangzhou Guowan Electronic Technology Co.

Guangzhou Guowan Electronic Technology Co., Ltd. is a high-tech enterprise with research, development, design and production of enterprise management system, intelligent card system and so on. There is a SQL injection vulnerability in the ordering system of Guangzhou Guowan Electronic Technology...

Bakeshop Online Ordering System 1.0 Cross Site Scripting

Exploit Title: Bakeshop Online Ordering System 1.0 - 'Owner' Persistent Cross-site scripting Date: 26-11-2020 Exploit Author: Parshwa Bhavsar Vendor Homepage: https://www.sourcecodester.com/ Software Link:...

Bakeshop Online Ordering System 1.0 - 'Owner' Persistent Cross-site scripting

Exploit Title: Bakeshop Online Ordering System 1.0 - 'Owner' Persistent Cross-site scripting Date: 26-11-2020 Exploit Author: Parshwa Bhavsar Vendor Homepage: https://www.sourcecodester.com/ Software Link:...

Butler ordering is prone to SQL injection vulnerability

Butler's Order Easy, a collection of PC Mall + WeChat Mall + WeChat Small Program + APP Mall + h5 Mall four-in-one online ordering mall system, seamlessly connecting to Butler's software, to achieve seamless connection of commodities, inventory, orders, customers, finance and other data. Butler's...

SQL Injection Vulnerability in PIMS Online Order Management System of Dotop Technology Inc.

PIMS online order management system is suitable for single page ordering website, general product ordering website and other ordering websites. A SQL injection vulnerability exists in DotTop's PIMS Online Order Management System, which can be exploited by attackers to obtain sensitive database...

SQL Injection Vulnerability in Food Ordering Management System of Guangzhou Guowan Electronic Technology Co.

Ltd. ordering system is made for the local area network network ordering system, which is mainly applicable to small and medium-sized enterprises, institutions, hospitals, schools and other organizations to order food. Guangzhou Guowan Electronic Technology Co., Ltd. ordering management system SQ...

SQL Injection Vulnerability in Frontend me***.Asp Page of Rongguang Information Ordering and Consumption System

Rongguang Information Ordering and Picking Up Food Consumption System is a multi-functional ordering system developed by Shenzhen Rongguang Information Co. SQL injection vulnerability exists in the front-end me.Asp page of Rongguang Information Ordering and Consumption System, which can be...

xdcms网上订餐系统 sql注入

简要描述： rt 详细说明： 老问题了，订餐系统与企业管理系统 有着相似的地方。。于是就找到了一处注入。 官网演示。 注册用户后，修改资料。 改包 ，字段处加个 fields%5Btitle%5D=a&fields%5Btruename%5D=a&fields%5Btelephone%5D=a&fields%5Baddress%5D=a&fields%5Bcontent%5D=a&verifycode=1adf&submit=+%E6%8F%90+%E4%BA%A4+ 发现 报错了...

QUOTE&ORDERING SYSTEM 1.0 (ordernum) Multiple Vulnerabilities

No description provided by source. Title : QUOTE&ORDERING SYSTEM 1.0 ordernum Multiple Vulnerabilities Author : ajann Contact : : S.Page : ... $$ : $250.00 SQL--------------------------------------------------------- Register & Login Before Injection.. http://target/path//search.asp?ordernum=SQL...

Pizza Hut defaced, Authorities denies theft of 240000 Credit Cards

Yesterday Australian Pizza Hut website was compromised by a hacking group going by the name of 0-Day and Pyknic. Hackers defaced the website and claim that they made off with 260,000 Australian credit card numbers. Hack was 1st noticed by Whirlpool Forum users. But a Pizza Hut spokeswoman said th...

mycart 2.0 - Multiple Vulnerabilities

mycart 2.0 - Multiple Vulnerabilities MyCart 2.0 Multiple Remote Vulnerabilities Name MyCart Vendor http://open.appideas.com Versions Affected 2.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-10-27 X. INDEX I. ABO...

Section Rezin(Kesion)CMS V5. 5 filename parsing vulnerability-vulnerability warning-the black bar safety net

Section flood cms,eshop system to build the station brand. Professional open source cms projects customized services and card system, online output, online printing, advertising production, online photo ordering system provider. In the file upload process on a problem. Upload the file that is in...

Cross site scripting

Cross-site scripting XSS vulnerability in search.asp in Digitizing Quote And Ordering System 1.0 allows remote authenticated attackers to inject arbitrary web script or HTML via the ordernum parameter...

CVE-2007-0144

Cross-site scripting XSS vulnerability in search.asp in Digitizing Quote And Ordering System 1.0 allows remote authenticated attackers to inject arbitrary web script or HTML via the ordernum parameter...

CVE-2007-0144

The CVE-2007-0144 entry documents a Cross-site scripting (XSS) vulnerability in search.asp of Digitizing Quote And Ordering System 1.0. The issue allows remote authenticated attackers to inject arbitrary web script or HTML via the ordernum parameter. The NVD notes a MEDIUM base score (6.8) with n...