CVE-2024-7189 itsourcecode Online Food Ordering System editproduct.php unrestricted upload

A vulnerability classified as critical has been found in itsourcecode Online Food Ordering System 1.0. Affected is an unknown function of the file editproduct.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has be...

CVE-2024-7189

CVE-2024-7189 affects itsourcecode Online Food Ordering System 1.0. The vulnerability resides in an unknown function of the file editproduct.php, where manipulation of the photo parameter enables unrestricted file upload. Reported as exploitable remotely, with public disclosure of the exploit. Co...

Code vulnerabilities in online food ordering systems

Online Food Ordering System is itsourcecode open source online food ordering system. A code issue vulnerability exists in Online Food Ordering System version 1.0, which stems from an incorrect manipulation of the parameter photo that can lead to unrestricted uploads...

CVE-2024-7189: Unrestricted Upload of File with Dangerous Type

A vulnerability classified as critical has been found in itsourcecode Online Food Ordering System 1.0. Affected is an unknown function of the file editproduct.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has be...

Online Medicine Ordering System 1.0 Insecure Settings

==================================================================================================================================== | Title : Online Medicine Ordering System v1.0 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox...

CVE-2022-48792

In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix use-after-free for aborted SSP/STP sastask Currently a use-after-free may occur if a sastask is aborted by the upper layer before we handle the I/O completion in mpisspcompletion or mpisatacompletion. In this...

SUSE CVE-2024-40911

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Lock wiphy in cfg80211getstation Wiphy should be locked before calling rdevgetstation see lockdep assert in ieee80211getstation. This fixes the following kernel NULL dereference: Unable to handle kernel NULL point...

CVE-2024-6373

A vulnerability has been found in itsourcecode Online Food Ordering System up to 1.0 and classified as critical. This vulnerability affects unknown code of the file /addproduct.php. The manipulation of the argument photo leads to unrestricted upload. The attack can be initiated remotely. The...

CVE-2024-6373

A vulnerability has been found in itsourcecode Online Food Ordering System up to 1.0 and classified as critical. This vulnerability affects unknown code of the file /addproduct.php. The manipulation of the argument photo leads to unrestricted upload. The attack can be initiated remotely. The...

CVE-2024-6373 itsourcecode Online Food Ordering System addproduct.php unrestricted upload

A vulnerability has been found in itsourcecode Online Food Ordering System up to 1.0 and classified as critical. This vulnerability affects unknown code of the file /addproduct.php. The manipulation of the argument photo leads to unrestricted upload. The attack can be initiated remotely. The...

CVE-2024-6373

The CVE-2024-6373 issue affects itsourcecode Online Food Ordering System (up to v1.0). The vulnerability is in the /addproduct.php file, where manipulating the photo parameter leads to unrestricted file upload. This can be triggered remotely and the exploit has public disclosure. Multiple connect...

CVE-2024-6373 itsourcecode Online Food Ordering System addproduct.php unrestricted upload

A vulnerability has been found in itsourcecode Online Food Ordering System up to 1.0 and classified as critical. This vulnerability affects unknown code of the file /addproduct.php. The manipulation of the argument photo leads to unrestricted upload. The attack can be initiated remotely. The...

Online Food Ordering System Code Issue Vulnerability

Online Food Ordering System is an online food ordering system developed by Carlo Montero, an individual developer. A code issue exists in version 1.0 of the Online Food Ordering System due to an unrestricted file upload vulnerability in the /addproduct.php file...

CVE-2024-6373: Unrestricted Upload of File with Dangerous Type

A vulnerability has been found in itsourcecode Online Food Ordering System up to 1.0 and classified as critical. This vulnerability affects unknown code of the file /addproduct.php. The manipulation of the argument photo leads to unrestricted upload. The attack can be initiated remotely. The...

CVE-2024-5431: Improper Control of Filename for Include/Require Statement in PHP Program

The WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.2.25 via the reservationextrafield shortcode parameter. This makes it possible for authenticated...

CVE-2024-6253

A vulnerability was found in itsourcecode Online Food Ordering System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /purchase.php. The manipulation of the argument customer leads to sql injection. The attack may be launched remotely. The exploit...

CVE-2024-6253

A vulnerability was found in itsourcecode Online Food Ordering System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /purchase.php. The manipulation of the argument customer leads to sql injection. The attack may be launched remotely. The exploit...

CVE-2024-6253 itsourcecode Online Food Ordering System purchase.php sql injection

A vulnerability was found in itsourcecode Online Food Ordering System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /purchase.php. The manipulation of the argument customer leads to sql injection. The attack may be launched remotely. The exploit...

CVE-2024-6253

The CVE-2024-6253 entry concerns itsourcecode Online Food Ordering System 1.0, where the /purchase.php endpoint is vulnerable via manipulation of the customer parameter, leading to SQL injection. The issue is exploitable remotely, with publicly disclosed exploits. Affected component is the /purch...

Online Food Ordering System and Food Ordering System SQL Injection Vulnerabilities

Online Food Ordering System is an online food ordering system developed by Carlo Montero, an individual developer. A SQL injection vulnerability exists in Online Food Ordering System version 1.0, which stems from an incorrect manipulation of the parameter customer that can result in an sql...