CVE-2021-28294: Unrestricted Upload of File with Dangerous Type

Online Ordering System 1.0 is vulnerable to arbitrary file upload through /onlineordering/GPST/store/initiateorder.php, which may lead to remote code execution RCE...

Egavilan Media Bakeshop Online Ordering System SQL注入漏洞

Egavilan Media Bakeshop Online Ordering System is a Javascript-based code repository that supports interaction with git repositories from Egavilan Media. A SQL injection vulnerability exists in Online Ordering System 1.0, which allows unauthenticated SQL injection, leading to the disclosure of...

Egavilan Media Bakeshop Online Ordering System 代码问题漏洞

Egavilan Media Bakeshop Online Ordering System is a Javascript-based code repository that supports interaction with git repositories from Egavilan Media. A security vulnerability exists in Online Ordering System 1.0 that allows the upload of arbitrary .php files, which could lead to remote code...

Online Ordering System 1.0 - Arbitrary File Upload to Remote Code Execution Vulnerability

Exploit Title: Online Ordering System 1.0 - Arbitrary File Upload to Remote Code Execution Exploit Author: Suraj Bhosale Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/php/5125/online-ordering-system-using-phpmysql.html Version: 1.0 Tested on Windows...

Online Ordering System 1.0 - Blind SQL Injection (Unauthenticated) Vulnerability

Exploit Title: Online Ordering System 1.0 - Blind SQL Injection Unauthenticated Exploit Author: Suraj Bhosale Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/php/5125/online-ordering-system-using-phpmysql.html Version: v1.0 Vulnerable endpoint:...

Online Ordering System 1.0 - Blind SQL Injection (Unauthenticated)

Exploit Title: Online Ordering System 1.0 - Blind SQL Injection Unauthenticated Date: 2021-03-04 Exploit Author: Suraj Bhosale Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/php/5125/online-ordering-system-using-phpmysql.html Version: v1.0 Vulnerable...

Online Ordering System 1.0 - Arbitrary File Upload

Exploit Title: Online Ordering System 1.0 - Arbitrary File Upload to Remote Code Execution Date: 04/03/2021 Exploit Author: Suraj Bhosale Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/php/5125/online-ordering-system-using-phpmysql.html Version: 1.0...

Online Ordering System 1.0 SQL Injection

Exploit Title: Online Ordering System 1.0 - Blind SQL Injection Unauthenticated Date: 2021-03-04 Exploit Author: Suraj Bhosale Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/php/5125/online-ordering-system-using-phpmysql.html Version: v1.0 Vulnerable...

CVE-2020-35309

Bakeshop Online Ordering System in PHP/MySQLi 1.0 is affected by cross-site scripting XSS which allows remote attackers to inject an arbitrary web script or HTML in admin dashboard - "Categories"...

Egavilan Media Bakeshop Online Ordering System Cross-Site Scripting Vulnerability

Egavilan Media Bakeshop Online Ordering System is a Javascript-based code repository from Egavilan Media that supports interaction with git repositories. A cross-site scripting vulnerability exists in Bakeshop Online Ordering System that could allow a remote attacker to inject arbitrary web scrip...

CVE-2020-35309

CVE-2020-35309 affects the Bakeshop Online Ordering System in PHP/MySQLi 1.0. The vulnerability is described as cross-site scripting (XSS) that allows remote attackers to inject arbitrary web script or HTML in the admin dashboard, specifically under “Categories.” The connected documents do not pr...

CVE-2020-35309: Improper Neutralization of Input During Web Page Generation

Bakeshop Online Ordering System in PHP/MySQLi 1.0 is affected by cross-site scripting XSS which allows remote attackers to inject an arbitrary web script or HTML in admin dashboard - "Categories"...

SQL Injection Vulnerability in the Backend of Online Food Ordering System of Shenzhen Dianhang Technology Development Co.

Ltd. is a one-card system and product provider, offering attendance system, ordering system, consumption system, access control system products and services. There is a SQL injection vulnerability in the backend of the online food ordering system of Shenzhen Dianhang Technology Development Co. An...

SQL Injection Vulnerability in the Backend of Online Food Ordering System of Shenzhen Dianhang Technology Development Company Limited (CNVD-2021-04846)

Ltd. is a one-card system and product provider, offering attendance system, food ordering system, consumption system, access control system products and services. There is a SQL injection vulnerability in the backend of the online food ordering system of Shenzhen Dianhang Technology Development C...

SQL Injection Vulnerability in the Backend of Online Food Ordering System of Shenzhen Dianhang Science and Technology Development Co.

Ltd. is a one-card system and product provider, offering attendance system, food ordering system, consumption system, access control system products and services. There is a SQL injection vulnerability in the backend of the online food ordering system of Shenzhen Dianhang Technology Development C...

SQL Injection Vulnerability in the Frontend of Food Ordering Management System of Guangzhou Guowan Electronic Technology Co.

Ltd. ordering system is made for the local area network network ordering system, which is mainly applicable to small and medium-sized enterprises, institutions, hospitals, schools and other organizations to order food. Guangzhou Guowan Electronic Technology Co., Ltd. ordering management system in...

SQL Injection Vulnerability in Food Ordering System of Guangzhou Guowan Electronic Technology Co.

Guangzhou Guowan Electronic Technology Co., Ltd. is a high-tech enterprise with research, development, design and production of enterprise management system, intelligent card system and so on. There is a SQL injection vulnerability in the ordering system of Guangzhou Guowan Electronic Technology...

Bakeshop Online Ordering System 1.0 Cross Site Scripting

Exploit Title: Bakeshop Online Ordering System 1.0 - 'Owner' Persistent Cross-site scripting Date: 26-11-2020 Exploit Author: Parshwa Bhavsar Vendor Homepage: https://www.sourcecodester.com/ Software Link:...

Bakeshop Online Ordering System 1.0 - 'Owner' Persistent Cross-site scripting

Exploit Title: Bakeshop Online Ordering System 1.0 - 'Owner' Persistent Cross-site scripting Date: 26-11-2020 Exploit Author: Parshwa Bhavsar Vendor Homepage: https://www.sourcecodester.com/ Software Link:...

Butler ordering is prone to SQL injection vulnerability

Butler's Order Easy, a collection of PC Mall + WeChat Mall + WeChat Small Program + APP Mall + h5 Mall four-in-one online ordering mall system, seamlessly connecting to Butler's software, to achieve seamless connection of commodities, inventory, orders, customers, finance and other data. Butler's...