PT-2023-21010 · Unknown · Online Pizza Ordering System

Name of the Vulnerable Software and Affected Versions: Online Pizza Ordering System version 1.0 Description: A cross-site scripting XSS issue in the /php-opos/signup.php endpoint of the Online Pizza Ordering System allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2023-27212: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in /php-opos/signup.php of Online Pizza Ordering System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the redirect parameter...

CVE-2023-27210: Improper Neutralization of Special Elements used in an SQL Command

Online Pizza Ordering System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/vieworder.php...

PT-2023-16873 · Unknown · Sourcecodester Friendly Island Pizza Website/Ordering System

Name of the Vulnerable Software and Affected Versions: SourceCodester Friendly Island Pizza Website and Ordering System version 1.0 Description: A critical issue has been found in the file deleteorder.php, specifically in the GET Parameter Handler component. The manipulation of the id argument...

CVE-2023-27208

A cross-site scripting XSS vulnerability in /php-opos/login.php of Online Pizza Ordering System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the redirect parameter...

Online Pizza Ordering System Cross-Site Script Vulnerabilities

Online Pizza Ordering System is an online pizza ordering system by Carlo Montero, a personal developer. A security vulnerability exists in Online Pizza Ordering System version 1.0, which originates from a cross-site scripting XSS vulnerability in /php-opos/signup.php, which can be exploited by an...

CVE-2023-27208

A cross-site scripting XSS vulnerability in /php-opos/login.php of Online Pizza Ordering System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the redirect parameter...

PT-2023-21009 · Unknown · Online Pizza Ordering System

Name of the Vulnerable Software and Affected Versions: Online Pizza Ordering System version 1.0 Description: A cross-site scripting XSS issue in the /admin/navbar.php endpoint of the Online Pizza Ordering System allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

PT-2023-21006 · Unknown · Online Pizza Ordering System

Name of the Vulnerable Software and Affected Versions: Online Pizza Ordering System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/admin/manage user.php" API endpoint. Recommendations: For Online...

PT-2023-21008 · Unknown · Online Pizza Ordering System

Name of the Vulnerable Software and Affected Versions: Online Pizza Ordering System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/admin/view order.php" API endpoint. Recommendations: For Online Piz...

CVE-2023-27211

A cross-site scripting XSS vulnerability in /admin/navbar.php of Online Pizza Ordering System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the page parameter...

Online Pizza Ordering System SQL Injection Vulnerability

Online Pizza Ordering System is an online pizza ordering system by Carlo Montero, an individual developer. A security vulnerability exists in Online Pizza Ordering System version 1.0, which is caused by a SQL injection vulnerability via the id parameter in /admin/vieworder.php...

SourceCodester Friendly Island Pizza website and ordering system has a SQL injection vulnerability.

SourceCodester Friendly Island Pizza Website and Ordering System is the Island Pizza website and ordering system. A SQL injection vulnerability exists in SourceCodester Friendly Island Pizza Website and Ordering System version 1.0 due to an unknown function in the file deleteorder.php in the...

CVE-2023-27207

Online Pizza Ordering System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/manageuser.php...

Online Pizza Ordering System Cross-Site Script Vulnerabilities

Online Pizza Ordering System is an online pizza ordering system by Carlo Montero, a personal developer. A security vulnerability exists in Online Pizza Ordering System version 1.0, which originates from a cross-site scripting XSS vulnerability in /admin/navbar.php, which can be exploited by an...

CVE-2023-27207: Improper Neutralization of Special Elements used in an SQL Command

Online Pizza Ordering System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/manageuser.php...

CVE-2023-27208: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in /php-opos/login.php of Online Pizza Ordering System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the redirect parameter...

CVE-2023-27207

CVE-2023-27207 affects Online Pizza Ordering System 1.0 and involves a SQL injection in the admin-facing endpoint. The vulnerability is triggered via the id parameter on /admin/manage_user.php, enabling potential unauthorized data access or manipulation. CVSSv3.1 metrics provided indicate a netwo...

CVE-2023-27208

A cross-site scripting (XSS) vulnerability affects Online Pizza Ordering System 1.0, exploitable via /php-opos/login.php where an attacker can inject a crafted payload into the redirect parameter to execute arbitrary web scripts or HTML. The vulnerability is documented across multiple sources (e....

CVE-2023-27211

CVE-2023-27211 affects Online Pizza Ordering System v1.0. The vulnerability is an XSS in the /admin/navbar.php endpoint, exploitable via a crafted payload injected into the page parameter. Affected component: /admin/navbar.php; root cause: insufficient input sanitization leading to script/HTML ex...