1602 matches found
CVE-2023-45334
Affected software: Online Food Ordering System v1.0. Vulnerability: multiple unauthenticated SQL injection flaws in the routers/edit-orders.php resource, caused by inadequate validation/filtration of the status parameter. Impact (as stated): attacker can send unfiltered input to the database; CVS...
CVE-2023-45332
The CVE-2023-45332 entry is supported by connected data describing an unauthenticated SQL injection in Online Food Ordering System v1.0, exploitable via the routers/add-users.php deleted parameter without input validation. Root cause: unfiltered input is passed to the database, enabling potential...
CVE-2023-45331
The connected PT-2023-29506 entry documents a concrete vulnerability in the Online Food Ordering System (version 1.0). The issue is unauthenticated SQL injection in the routers/add-users.php endpoint via the contact parameter, which is not properly validated and sends unfiltered input to the data...
CVE-2023-45330
Concretely affected: Online Food Ordering System version 1.0. The issue is unauthenticated SQL Injection in the routers/add-users.php endpoint, caused by improper validation of the username parameter. This vulnerability is described as multiple SQLi vulnerabilities, with risk of unauthorized DB a...
CVE-2023-45329
Affected software: Online Food Ordering System, version 1.0. Vulnerability: unauthenticated SQL injection in routers/add-users.php; the unvalidated role parameter is sent to the database. Impact: potential for unauthorized data access/modification as described. Exploitation details: not provided ...
CVE-2023-45328
CVE-2023-45328 is rejected/not used and does not represent an active vulnerability entry.
CVE-2023-45327
CVE-2023-45327 is rejected/withdrawn by its CVE Numbering Authority and does not represent an active vulnerability entry.
CVE-2023-45326
CVE-2023-45326 entry is rejected/not used as stated in the Initial Description.
CVE-2023-45325
The CVE-2023-45325 entry concerns Online Food Ordering System v1.0 with multiple unauthenticated SQL Injection vulnerabilities. The address parameter of routers/add-users.php is not properly validated, allowing unfiltered data to reach the database. The vulnerability is rated at CVSSv3.1, base sc...
CVE-2023-45325 Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'address' parameter of the routers/add-users.php resource does not validate the characters received and they are sent unfiltered to the database...
CVE-2023-45324
The connected document PT-2023-29499 documents a vulnerability in the Online Food Ordering System (version 1.0) affecting the price parameter in the routers/add-item.php endpoint. It describes an Unauthenticated SQL Injection that could allow an attacker to access sensitive data. The practical im...
CVE-2023-45323
CVE-2023-45323 affects Online Food Ordering System v1.0. The vulnerability is in the routers/add-item.php resource, where the name parameter is not properly validated, allowing unauthenticated SQL Injection. Multiple sources describe this issue as unauthenticated injections with the potential for...
CVE-2023-45323 Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'name' parameter of the routers/add-item.php resource does not validate the characters received and they are sent unfiltered to the database...
Online Food Ordering System SQL Injection Vulnerability
Online Food Ordering System is an online food ordering system by Carlo Montero, a personal developer. A SQL injection vulnerability exists in Online Food Ordering System v1.0, which is caused by insufficient filtering of the address parameter on the routers/add-users.php page...
PT-2023-29506 · Unknown · Online Food Ordering System
Name of the Vulnerable Software and Affected Versions: Online Food Ordering System version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the contact parameter of the "routers/add-users.php" resource does not validate the characters...
Online Food Ordering System SQL Injection Vulnerability
Online Food Ordering System is an online food ordering system by Carlo Montero, a personal developer. A SQL injection vulnerability exists in Online Food Ordering System v1.0, which is caused by insufficient filtering of the status parameter on the routers/edit-orders.php page...
PT-2023-29509 · Unknown · Online Food Ordering System
Name of the Vulnerable Software and Affected Versions: Online Food Ordering System version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the status parameter of the "routers/edit-orders.php" resource does not validate the characters...
PT-2023-29523 · Unknown · Online Food Ordering System
Name of the Vulnerable Software and Affected Versions: Online Food Ordering System version 1.0 Description: The Online Food Ordering System is affected by multiple Unauthenticated SQL Injection vulnerabilities. The issue arises from the verified parameter of the routers/user-router.php resource,...
PT-2023-29521 · Unknown · Online Food Ordering System
Name of the Vulnerable Software and Affected Versions: Online Food Ordering System version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities in the Online Food Ordering System. Specifically, the deleted parameter of the routers/user-router.php resource doe...