Design/Logic Flaw

An arbitrary file upload vulnerability in the Select Image function of Online Food Ordering System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-29650

The CVE-2022-29650 entry concerns Online Food Ordering System v1.0 and a SQL injection in the /online-food-order/food-search.php search parameter. The vulnerability is introduced via the Search input, enabling SQL injection attacks that could affect confidentiality, integrity, and availability ac...

CVE-2022-29650

Online Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the Search parameter at /online-food-order/food-search.php...

CVE-2022-29651

The CVE-2022-29651 entry pertains to Online Food Ordering System v1.0, where an arbitrary file upload vulnerability in the Select Image feature can be exploited by uploading a crafted PHP file to achieve remote code execution. Available sources (NVD/NIST, Red Hat, CNVD, CVE listings) confirm the ...

CVE-2022-29651

An arbitrary file upload vulnerability in the Select Image function of Online Food Ordering System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-29650: Improper Neutralization of Special Elements used in an SQL Command

Online Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the Search parameter at /online-food-order/food-search.php...

PT-2022-19755

Name of the Vulnerable Software and Affected Versions Online Food Ordering System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the Search parameter at the "/online-food-order/food-search.php" API endpoint. Recommendations F...

CVE-2022-29651: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in the Select Image function of Online Food Ordering System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

Online Food Ordering System SQL注入漏洞

Online Food Ordering System is an online food ordering system designed primarily for use in the food delivery industry.Online Food Ordering System version 1.0 is vulnerable to a SQL injection vulnerability in the /online-food-order/food-search.php search parameter in...

PT-2022-19756

Name of the Vulnerable Software and Affected Versions Online Food Ordering System version 1.0 Description The issue is related to an arbitrary file upload vulnerability in the Select Image function, allowing attackers to execute arbitrary code via a crafted PHP file. This can potentially lead to...

CVE-2022-29218

RubyGems is a package registry used to supply software for the Ruby language ecosystem. An ordering mistake in the code that accepts gem uploads allowed some gems with platforms ending in numbers, like "arm64-darwin-21" to be temporarily replaced in the CDN cache by a malicious package. The bug h...

PT-2022-19470 · Rubygems · Rubygems

Name of the Vulnerable Software and Affected Versions: RubyGems affected versions not specified Description: An ordering mistake in the code that accepts gem uploads allowed some gems to be temporarily replaced in the CDN cache by a malicious package. The issue is believed to have never been...

Speculative Load Disordering

Bulletin ID: AMD-SB-1035 Potential Impact: Data Leakage Severity: Low Summary AMD processors may speculatively re-order load instructions which can result in stale data being observed when multiple processors are operating on shared memory, resulting in potential data leakage. CVE Details...

Multiple missing approve(spender, 0) before approve(spender, amount)

Lines of code Vulnerability details Impact There are a few instances of missing calls to the IERC20 interface's approve function. The allowance needs to be set to 0 by calling for a given address and spender IERC20address.approvespender, 0. Not only do tokens like USDT require the allowance to be...

Sourcecodester Gadget Works Online Ordering System in PHP/MySQLi跨站脚本漏洞

Sourcecodester Gadget Works Online Ordering System in PHP/MySQLi is an online ordering system for Gadget Works developed using PHP/MySQLi. The main goal of this online ordering system is to improve customer convenience. Sourcecodester Gadget Works Online Ordering System in PHP/MySQLi 1.0 is...

Sourcecodester Mobile Shop System in PHP MySQL Information Disclosure Vulnerability

Sourcecodester Mobile Shop System in PHP MySQL is an online ordering system for Gadget Works developed using PHP/MySQLi. The main goal of this online ordering system is to improve customer convenience. sourcecodester Mobile Shop System in PHP MySQL 1.0 is vulnerable due to a security flaw in the...

CVE-2021-34073

A Cross Site Scripting XSS vulnerabilty exists in Sourcecodester Gadget Works Online Ordering System in PHP/MySQLi 1.0 via the Category parameter in an add function in category/index.php...

CVE-2021-34073

A Cross Site Scripting XSS vulnerabilty exists in Sourcecodester Gadget Works Online Ordering System in PHP/MySQLi 1.0 via the Category parameter in an add function in category/index.php...

Cross site scripting

A Cross Site Scripting XSS vulnerabilty exists in Sourcecodester Gadget Works Online Ordering System in PHP/MySQLi 1.0 via the Category parameter in an add function in category/index.php...

CVE-2021-34073

A Cross Site Scripting XSS vulnerabilty exists in Sourcecodester Gadget Works Online Ordering System in PHP/MySQLi 1.0 via the Category parameter in an add function in category/index.php...