3634 matches found
CVE-2022-31327: Improper Neutralization of Special Elements used in an SQL Command
Online Ordering System By janobe 2.3.2 is vulneranle to SQL Injection via /ordering/index.php?q=products&id=...
CVE-2022-31337: Improper Neutralization of Special Elements used in an SQL Command
Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/category/index.php?view=edit&id=...
CVE-2022-31335: Improper Neutralization of Special Elements used in an SQL Command
Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/stockin/index.php?view=edit&id=...
CVE-2022-31336: Improper Neutralization of Special Elements used in an SQL Command
Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/stockin/loaddata.php...
CVE-2022-31328: Improper Neutralization of Special Elements used in an SQL Command
Online Ordering System By janobe 2.3.2 has SQL Injection via /ordering/admin/products/index.php?view=edit&id=...
PT-2022-20692
Name of the Vulnerable Software and Affected Versions Online Ordering System version 2.3.2 Description The issue is related to SQL Injection. It can be exploited via the "/ordering/admin/stockin/index.php?view=edit&id=" endpoint. The id variable is vulnerable to SQL injection attacks...
Fast Food Ordering System 1.0 Cross Site Scripting
Title: Fast Food Ordering System 1.0 Stored Cross-Site Scripting Author: Ashish Kumar Date: 05.31.2022 Vendor: https://www.sourcecodester.com/users/tips23 Software: https://www.sourcecodester.com/php/15366/fast-food-ordering-system-phpoop-free-source-code.html Reference:...
PT-2022-20690
Name of the Vulnerable Software and Affected Versions Online Ordering System By janobe version 2.3.2 Description The issue is related to SQL Injection. It affects the /ordering/admin/products/index.php?view=edit&id= API endpoint, where the id parameter is vulnerable. Recommendations For version...
PT-2022-20694
Name of the Vulnerable Software and Affected Versions Online Ordering System version 2.3.2 Description The issue allows for SQL Injection via the "/ordering/admin/category/index.php?view=edit&id=" API endpoint, specifically targeting the id variable. This could potentially lead to unauthorized da...
PT-2022-20695
Name of the Vulnerable Software and Affected Versions Online Ordering System version 2.3.2 Description The issue allows for SQL Injection via the /ordering/admin/user/index.php?view=edit&id= API endpoint, specifically targeting the id variable. This could potentially lead to unauthorized access o...
PT-2022-20691
Name of the Vulnerable Software and Affected Versions Online Ordering System By janobe version 2.3.2 Description The issue allows for SQL Injection via the "/ordering/admin/orders/loaddata.php" API endpoint. Recommendations For version 2.3.2, update to a newer version that contains a fix for this...
PT-2022-20693
Name of the Vulnerable Software and Affected Versions Online Ordering System version 2.3.2 Description The issue concerns SQL Injection via the "/ordering/admin/stockin/loaddata.php" API endpoint. This allows for potential manipulation of database queries. No information is provided about the...
Online Food Ordering System Arbitrary File Upload Vulnerability
Online Food Ordering System is an online food ordering system. An arbitrary file upload vulnerability exists in Online Food Ordering System version 1.0, which stems from the lack of validation of uploaded files in the Select Image feature, and can be exploited to upload a malicious file that can ...
Online Food Ordering System SQL Injection Vulnerability
Online Food Ordering System is an online food ordering system designed primarily for use in the food delivery industry.Online Food Ordering System version 1.0 is vulnerable to a SQL injection vulnerability in the /online-food-order/food-search.php search parameter in...
CVE-2022-29650
Online Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the Search parameter at /online-food-order/food-search.php...
CVE-2022-29650
Online Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the Search parameter at /online-food-order/food-search.php...
CVE-2022-29651
An arbitrary file upload vulnerability in the Select Image function of Online Food Ordering System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2022-29650
Online Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the Search parameter at /online-food-order/food-search.php...
