PT-2025-25619 · Unknown · Sourcecodester Simple Food Ordering System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Food Ordering System version 1.0 Description: A critical issue was found in the system, affecting an unknown function of the file /editproduct.php. The manipulation of the photo argument leads to unrestricted upload. It ...

SourceCodester Simple Food Ordering System 代码问题漏洞

SourceCodester Simple Food Ordering System is a SourceCodester open source simple food ordering system. A code issue vulnerability exists in version 1.0 of the SourceCodester Simple Food Ordering System, which stems from an incorrect manipulation of the parameter photo in the file /editproduct.ph...

CVE-2025-6131

A vulnerability, which was classified as problematic, was found in CodeAstro Food Ordering System 1.0. Affected is an unknown function of the file /admin/store/edit/ of the component POST Request Parameter Handler. The manipulation of the argument Restaurant Name/Address leads to cross site...

CVE-2025-6131 CodeAstro Food Ordering System POST Request Parameter edit cross site scripting

A vulnerability, which was classified as problematic, was found in CodeAstro Food Ordering System 1.0. Affected is an unknown function of the file /admin/store/edit/ of the component POST Request Parameter Handler. The manipulation of the argument Restaurant Name/Address leads to cross site...

CVE-2025-6131

CodeAstro Food Ordering System 1.0 contains a cross-site scripting (XSS) vulnerability in the POST Request Parameter Handler, triggered by manipulating the Restaurant Name/Address in the /admin/store/edit/ function. The underlying issue is an input handling flaw that allows remote attackers to in...

CVE-2025-6131 CodeAstro Food Ordering System POST Request Parameter edit cross site scripting

A vulnerability, which was classified as problematic, was found in CodeAstro Food Ordering System 1.0. Affected is an unknown function of the file /admin/store/edit/ of the component POST Request Parameter Handler. The manipulation of the argument Restaurant Name/Address leads to cross site...

PT-2025-25576 · Unknown · Codeastro Food Ordering System

Name of the Vulnerable Software and Affected Versions: CodeAstro Food Ordering System version 1.0 Description: A cross-site scripting XSS vulnerability exists due to the manipulation of the Restaurant Name/Address argument within a POST request parameter handler. This affects an unknown function ...

CVE-2024-28303

Open Source Medicine Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the date parameter at /admin/reports/index.php...

CVE-2024-7189

A vulnerability classified as critical has been found in itsourcecode Online Food Ordering System 1.0. Affected is an unknown function of the file editproduct.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has be...

CVE-2024-25217

Online Medicine Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /omos/?p=products/viewproduct...

CVE-2024-5636

A vulnerability was found in itsourcecode Bakery Online Ordering System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file report/index.php. The manipulation of the argument procduct leads to sql injection. The attack may be launched remotely. The...

CVE-2024-32579

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GloriaFood Restaurant Menu – Food Ordering System – Table Reservation allows Stored XSS.This issue affects Restaurant Menu – Food Ordering System – Table Reservation: from n/a through 2.4.1...

CVE-2024-8558

A vulnerability classified as problematic was found in SourceCodester Food Ordering Management System 1.0. This vulnerability affects unknown code of the file /foms/routers/place-order.php of the component Price Handler. The manipulation of the argument total leads to improper validation of...

CVE-2024-50647

The pythonfood ordering system V1.0 has an unauthorized vulnerability that leads to the leakage of sensitive user information. Attackers can access it through https://ip:port/api/myapp/index/user/info?id=1 And modify the ID value to obtain sensitive user information beyond authorization...

CVE-2024-8604

A vulnerability classified as problematic has been found in SourceCodester Online Food Ordering System 2.0. This affects an unknown part of the file index.php of the component Create an Account Page. The manipulation of the argument First Name/Last Name leads to cross site scripting. It is possib...

CVE-2024-13067

A vulnerability was found in CodeAstro Online Food Ordering System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/allusers.php of the component All Users Page. The manipulation leads to improper access controls. The attack may be initiated remotely...

CVE-2024-57328

A SQL Injection vulnerability exists in the login form of Online Food Ordering System v1.0. The vulnerability arises because the input fields username and password are not properly sanitized, allowing attackers to inject malicious SQL queries to bypass authentication and gain unauthorized access...

CVE-2024-7488

Integer Overflow or Wraparound, Improper Validation of Specified Quantity in Input vulnerability in RestApp Inc. Online Ordering System allows Integer Attacks. This issue affects Online Ordering System: 8.2.1. NOTE: Vulnerability fixed in version 8.2.2 and does not exist before 8.2.1...

CVE-2023-0332

A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been classified as critical. Affected is an unknown function of the file admin/manageuser.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit...

CVE-2023-0304

A vulnerability classified as critical has been found in SourceCodester Online Food Ordering System. This affects an unknown part of the file adminclass.php of the component Signup Module. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotel...