Lucene search
+L

3652 matches found

NVD
NVD
•added 2025/03/24 2:15 p.m.•32 views

CVE-2025-30601

Cross-Site Request Forgery CSRF vulnerability in flipdish Flipdish Ordering System flipdish-ordering-system allows Cross Site Request Forgery.This issue affects Flipdish Ordering System: from n/a through = 1.5.2...

4.3CVSS0.00184EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/24 1:47 p.m.•87 views

CVE-2025-30601

CVE-2025-30601 is a CSRF vulnerability in Flipdish Ordering System affecting versions from

4.3CVSS7.2AI score0.00184EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/03/24 1:47 p.m.•37 views

CVE-2025-30601 WordPress Flipdish Ordering System plugin <= 1.5.2 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

Cross-Site Request Forgery CSRF vulnerability in flipdish Flipdish Ordering System flipdish-ordering-system allows Cross Site Request Forgery.This issue affects Flipdish Ordering System: from n/a through = 1.5.2...

4.3CVSS0.00184EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/24 1:47 p.m.•10 views

CVE-2025-30601 WordPress Flipdish Ordering System plugin <= 1.5.2 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

Cross-Site Request Forgery CSRF vulnerability in flipdish Flipdish Ordering System flipdish-ordering-system allows Cross Site Request Forgery.This issue affects Flipdish Ordering System: from n/a through = 1.5.2...

4.3CVSS7.3AI score0.00184EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/03/24 1:04 p.m.•18 views

WordPress Flipdish Ordering System plugin <= 1.5.2 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

Cross Site Request Forgery CSRF to Settings Change vulnerability discovered by Nabil Irawan in WordPress Plugin Flipdish Ordering System versions = 1.5.2...

4.3CVSS6.9AI score0.00184EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2025/03/24 12:00 a.m.•6 views

PT-2025-12640

Name of the Vulnerable Software and Affected Versions Flipdish Ordering System versions 1.4.16 and earlier Description The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. Recommendations For versions 1.4.16 and earlier, update to a version later...

4.3CVSS0.00184EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2025/03/24 12:00 a.m.•19 views

WordPress plugin Flipdish Ordering System 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists in...

4.3CVSS8.4AI score0.00184EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/24 12:00 a.m.•8 views

CVE-2025-30601: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in flipdish Flipdish Ordering System flipdish-ordering-system allows Cross Site Request Forgery.This issue affects Flipdish Ordering System: from n/a through = 1.5.2...

4.3CVSS5.8AI score0.00184EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/03/19 6:20 p.m.•22 views

CVE-2025-2387

A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been classified as critical. Affected is an unknown function of the file /admin/ajax.php?action=addtocart. The manipulation of the argument pid leads to sql injection. It is possible to launch the attack remotely...

9.8CVSS7.7AI score0.00544EPSS
SaveExploits1References1
NVD
NVD
•added 2025/03/17 6:15 p.m.•27 views

CVE-2025-2387

A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been classified as critical. Affected is an unknown function of the file /admin/ajax.php?action=addtocart. The manipulation of the argument pid leads to sql injection. It is possible to launch the attack remotely...

9.8CVSS0.00544EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2025/03/17 6:15 p.m.•19 views

CVE-2025-2387

A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been classified as critical. Affected is an unknown function of the file /admin/ajax.php?action=addtocart. The manipulation of the argument pid leads to sql injection. It is possible to launch the attack remotely...

9.8CVSS6.9AI score0.00544EPSS
SaveExploits1References5
CVE
CVE
•added 2025/03/17 5:31 p.m.•74 views

CVE-2025-2387

SourceCodester Online Food Ordering System 2.0 contains a remote SQL injection in /admin/ajax.php?action=add_to_cart triggered by manipulating pid. The affected component is an unknown function, and the vulnerability is disclosed publicly, enabling exploitation without credentials. The CVE notes ...

9.8CVSS7.6AI score0.00544EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/03/17 5:31 p.m.•18 views

CVE-2025-2387 SourceCodester Online Food Ordering System ajax.php sql injection

A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been classified as critical. Affected is an unknown function of the file /admin/ajax.php?action=addtocart. The manipulation of the argument pid leads to sql injection. It is possible to launch the attack remotely...

7.5CVSS7.5AI score0.00544EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/03/17 5:31 p.m.•45 views

CVE-2025-2387 SourceCodester Online Food Ordering System ajax.php sql injection

A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been classified as critical. Affected is an unknown function of the file /admin/ajax.php?action=addtocart. The manipulation of the argument pid leads to sql injection. It is possible to launch the attack remotely...

7.5CVSS0.00544EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/03/17 12:00 a.m.•8 views

PT-2025-11532

Name of the Vulnerable Software and Affected Versions SourceCodester Online Food Ordering System version 2.0 Description A critical issue was found in the system, affecting an unknown function of the file /admin/ajax.php?action=add to cart. The manipulation of the pid argument leads to SQL...

9.8CVSS0.00544EPSS
SaveExploits1References12
CNNVD
CNNVD
•added 2025/03/17 12:00 a.m.•16 views

SourceCodester Online Food Ordering System 注入漏洞

SourceCodester Online Food Ordering System is a SourceCodester open source online food ordering system. An injection vulnerability exists in SourceCodester Online Food Ordering System version 2.0, which stems from an incorrect manipulation of the parameter pid that can lead to SQL injection...

9.8CVSS8AI score0.00544EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/17 12:00 a.m.•14 views

CVE-2025-2387: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been classified as critical. Affected is an unknown function of the file /admin/ajax.php?action=addtocart. The manipulation of the argument pid leads to sql injection. It is possible to launch the attack remotely...

9.8CVSS6.9AI score0.00544EPSS
SaveExploits1References1
zdt
zdt
•added 2025/03/06 12:00 a.m.•171 views

Resto - Single Vendor Online Food Ordering Shell Upload Vulnerability

Title: Resto - Single Vendor Online Food Ordering - Authenticated RCE Description: Resto Single Vendor Online Source URL: https://res.newmedilife.in/admin Source Name/Email: Mehmet Can Kadıoğlu a.k.a mao7un CVEs: N/A Software URL:...

7.4AI score
SaveExploits0
SUSE CVE
SUSE CVE
•added 2025/02/27 3:10 a.m.•16 views

SUSE CVE-2022-49194

In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: Use stronger register read/writes to assure ordering GCC12 appears to be much smarter about its dependency tracking and is aware that the relaxed variants are just normal loads and stores and this is causing proble...

5.5CVSS6.4AI score0.00693EPSS
SaveExploits0References7
osv_ubuntu
osv_ubuntu
•added 2025/02/26 7:01 a.m.•14 views

UBUNTU-CVE-2022-49434

In the Linux kernel, the following vulnerability has been resolved: PCI: Avoid pcidevlock AB/BA deadlock with sriovnumvfsstore The sysfs sriovnumvfsstore path acquires the device lock before the config space access lock: sriovnumvfsstore devicelock A 1 acquire device lock sriovconfigure...

5.5CVSS6.1AI score0.00215EPSS
SaveExploits0References12
Rows per page
Query Builder