CVE-2021-25211: Unrestricted Upload of File with Dangerous Type

Arbitrary file upload vulnerability in SourceCodester Ordering System v 1.0 allows attackers to execute arbitrary code, via the file upload to ordering\admin\products\edit.php...

SourceCodester Ordering System 代码问题漏洞

SourceCodester Ordering System is a multi-store ordering system. In this system, customers can choose from a wide range of products, such as electronics, fashion apparel, home appliances, etc. A security vulnerability exists in SourceCodester Ordering System 1.0, which can be exploited by attacke...

SQL Injection Vulnerability in Wechat Ordering System of Huitong Network

Shenzhen Huitong Network is a solution provider. Huitong Network WeChat Ordering System has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Gadget Works Online Ordering System 1.0 Cross Site Scripting

Exploit Title: Gadget Works Online Ordering System 1.0 - 'Category' Persistent Cross-Site Scripting XSS Date: 24-05-2021 Exploit Author: Vinay H C Vendor Homepage: https://www.sourcecodester.com/ Software Link:...

Gadget Works Online Ordering System 1.0 - (Category) Persistent Cross-Site Scripting Vulnerability

Exploit Title: Gadget Works Online Ordering System 1.0 - 'Category' Persistent Cross-Site Scripting XSS Exploit Author: Vinay H C Vendor Homepage: https://www.sourcecodester.com/ Software Link: https://www.sourcecodester.com/php/13093/gadget-works-online-ordering-system-phpmysqli.html Version: 1....

Gadget Works Online Ordering System 1.0 - 'Category' Persistent Cross-Site Scripting (XSS)

Exploit Title: Gadget Works Online Ordering System 1.0 - 'Category' Persistent Cross-Site Scripting XSS Date: 24-05-2021 Exploit Author: Vinay H C Vendor Homepage: https://www.sourcecodester.com/ Software Link:...

File upload vulnerability in responsive-ordering-system

responsive-ordering-system online ordering system with POS and kitchen-side user interface. A file upload vulnerability exists in responsive-ordering-system, which can be exploited by an attacker to gain control of the server...

Gadget Works Online Ordering System 1.0 SQL Injection / Code Execution

Exploit Title: Gadget works online ordering system - Authentication Bypass SQLi Date: 03/05/2021 Exploit Author: Richard Jones Vendor Homepage: https://www.sourcecodester.com/php/13093/gadget-works-online-ordering-system-phpmysqli.html Version: 1.0 Tested on: Windows 10 build 19041 + xampp 3.2.4...

Logic Flaw Vulnerability in Yazi Cloud Food Ordering System

Yazi cloud technology is a technology research and development innovation enterprise with rich experience in "Internet +" project diagnosis, planning, research and development, and landing as a whole. A logic flaw exists in the Yaziyun food ordering system, which can be exploited by attackers to...

CVE-2021-28294

Online Ordering System 1.0 is vulnerable to arbitrary file upload through /onlineordering/GPST/store/initiateorder.php, which may lead to remote code execution RCE...

CVE-2021-28294

Online Ordering System 1.0 is vulnerable to arbitrary file upload through /onlineordering/GPST/store/initiateorder.php, which may lead to remote code execution RCE...

CVE-2021-28295

Online Ordering System 1.0 is vulnerable to unauthenticated SQL injection through /onlineordering/GPST/admin/design.php, which may lead to database information disclosure...

CVE-2021-28295

Online Ordering System 1.0 is vulnerable to unauthenticated SQL injection through /onlineordering/GPST/admin/design.php, which may lead to database information disclosure...

Sql injection

Online Ordering System 1.0 is vulnerable to unauthenticated SQL injection through /onlineordering/GPST/admin/design.php, which may lead to database information disclosure...

Design/Logic Flaw

Online Ordering System 1.0 is vulnerable to arbitrary file upload through /onlineordering/GPST/store/initiateorder.php, which may lead to remote code execution RCE...

CVE-2021-28295

CVE-2021-28295 affects Online Ordering System 1.0. The vulnerability is an unauthenticated SQL injection in the design.php path under /onlineordering/GPST/admin/ that may disclose database information. Multiple sources (NVD, Red Hat, PRION, CVE listings) corroborate the issue and timing, with exp...

CVE-2021-28295

Online Ordering System 1.0 is vulnerable to unauthenticated SQL injection through /onlineordering/GPST/admin/design.php, which may lead to database information disclosure...

CVE-2021-28294

CVE-2021-28294 affects Online Ordering System 1.0. The vulnerability is an arbitrary file upload via the endpoint /onlineordering/GPST/store/initiateorder.php, which may lead to remote code execution (RCE). Several connected sources corroborate the RCE risk and the specific upload vector; an expl...

CVE-2021-28294

Online Ordering System 1.0 is vulnerable to arbitrary file upload through /onlineordering/GPST/store/initiateorder.php, which may lead to remote code execution RCE...

CVE-2021-28295: Improper Neutralization of Special Elements used in an SQL Command

Online Ordering System 1.0 is vulnerable to unauthenticated SQL injection through /onlineordering/GPST/admin/design.php, which may lead to database information disclosure...