Lucene search
+L

3634 matches found

NVD
NVD
•added 2021/10/29 5:15 p.m.•25 views

CVE-2021-41644

Remote Code Exection RCE vulnerability exists in Sourcecodester Online Food Ordering System 2.0 via a maliciously crafted PHP file that bypasses the image upload filters...

9.8CVSS0.02498EPSS
SaveExploits1References1
Prion
Prion
•added 2021/10/29 5:15 p.m.•27 views

Remote code execution

Remote Code Exection RCE vulnerability exists in Sourcecodester Online Food Ordering System 2.0 via a maliciously crafted PHP file that bypasses the image upload filters...

7.5CVSS9.5AI score0.02498EPSS
SaveExploits1References1Affected Software1
attackerkb
attackerkb
•added 2021/10/29 5:15 p.m.•9 views

CVE-2021-41644

Remote Code Exection RCE vulnerability exists in Sourcecodester Online Food Ordering System 2.0 via a maliciously crafted PHP file that bypasses the image upload filters...

9.8CVSS7.4AI score0.02498EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2021/10/29 4:55 p.m.•38 views

CVE-2021-41644

Remote Code Exection RCE vulnerability exists in Sourcecodester Online Food Ordering System 2.0 via a maliciously crafted PHP file that bypasses the image upload filters...

9.8AI score0.02498EPSS
SaveExploits1References1
CVE
CVE
•added 2021/10/29 4:55 p.m.•75 views

CVE-2021-41644

CVE-2021-41644 affects Sourcecodester Online Food Ordering System 2.0. The vulnerability allows remote code execution through a maliciously crafted PHP file that bypasses image upload filters, enabling an attacker to upload and execute code. NVD reports high to critical severity (CVSS v2 7.5; v3....

9.8CVSS9.5AI score0.02498EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/29 12:00 a.m.•6 views

CVE-2021-41644: Unrestricted Upload of File with Dangerous Type

Remote Code Exection RCE vulnerability exists in Sourcecodester Online Food Ordering System 2.0 via a maliciously crafted PHP file that bypasses the image upload filters...

9.8CVSS5.9AI score0.02498EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/10/29 12:00 a.m.•9 views

PT-2021-23363

Name of the Vulnerable Software and Affected Versions Sourcecodester Online Food Ordering System version 2.0 Description A Remote Code Execution RCE issue exists due to a maliciously crafted PHP file that bypasses the image upload filters, allowing for potential code execution. Recommendations Fo...

9.8CVSS0.02498EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2021/10/22 12:00 a.m.•318 views

Ubuntu 20.04 LTS : Linux kernel (Azure) vulnerabilities (USN-5120-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5120-1 advisory. It was discovered that the f2fs file system in the Linux kernel did not properly validate metadata in some situations. An attacker could use this to...

8.7CVSS7.5AI score0.03354EPSS
SaveExploits3References10
Packet Storm
Packet Storm
•added 2021/10/06 12:00 a.m.•363 views

Online-Food-Ordering-Web-App SQL Injection

CVE-2021-41647 SQL Injection in Online-Food-Ordering-Web-App The Online-Food-Ordering-Web-App is vulnerable to un-authenticated error and time-based blind SQL Injection attacks. The username parameter on the /login.php page does not sanitize the user input, an attacker is able to bypass the login...

8AI score0.02008EPSS
SaveExploits4
Cvelist
Cvelist
•added 2021/10/01 2:32 p.m.•32 views

CVE-2021-41647

An un-authenticated error-based and time-based blind SQL injection vulnerability exists in Kaushik Jadhav Online Food Ordering Web App 1.0. An attacker can exploit the vulnerable "username" parameter in login.php and retrieve sensitive database information, as well as add an administrative user...

9.7AI score0.02008EPSS
SaveExploits4References4
Mend
Mend
•added 2021/10/01 2:32 p.m.•2 views

CVE-2021-41647

An un-authenticated error-based and time-based blind SQL injection vulnerability exists in Kaushik Jadhav Online Food Ordering Web App 1.0. An attacker can exploit the vulnerable "username" parameter in login.php and retrieve sensitive database information, as well as add an administrative user...

9.3CVSS0.02008EPSS
SaveExploits4References4
Positive Technologies
Positive Technologies
•added 2021/10/01 12:00 a.m.•2 views

PT-2021-23366

Name of the Vulnerable Software and Affected Versions Kaushik Jadhav Online Food Ordering Web App version 1.0 Description An un-authenticated error-based and time-based blind SQL injection issue exists. An attacker can exploit the vulnerable username parameter in "login.php" and retrieve sensitiv...

9.1CVSS0.02008EPSS
SaveExploits4References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/01 12:00 a.m.•5 views

CVE-2021-41647: Improper Neutralization of Special Elements used in an SQL Command

An un-authenticated error-based and time-based blind SQL injection vulnerability exists in Kaushik Jadhav Online Food Ordering Web App 1.0. An attacker can exploit the vulnerable "username" parameter in login.php and retrieve sensitive database information, as well as add an administrative user...

9.1CVSS8AI score0.02008EPSS
SaveExploits4References2
Veracode
Veracode
•added 2021/09/30 1:39 p.m.•62 views

Denial Of Service (DoS)

linux is vulnerable to denial of service. The vulnerability exists due to an incorrect connection-setup ordering in fs/nfs/nfs4client.c...

6.5CVSS2.8AI score0.01245EPSS
SaveExploits0References7Affected Software3
GithubExploit
GithubExploit
•added 2021/09/28 7:59 a.m.•151 views

Exploit for SQL Injection in Online_Food_Ordering_Web_App_Project Online_Food_Ordering_Web_App

CVE-2021-41647 CVE-2021-41647 SQL Injection in Online-Food-Or...

9.1CVSS8.3AI score0.02008EPSS
SaveExploits4
zdt
zdt
•added 2021/09/20 12:00 a.m.•217 views

Online Food Ordering System 2.0 - Remote Code Execution (Unauthenticated) Exploit

Exploit Title: Online Food Ordering System 2.0 - Remote Code Execution RCE Unauthenticated Exploit Author: Abdullah Khawaja hax.3xploit Vendor Homepage: https://www.sourcecodester.com/php/14951/online-food-ordering-system-php-and-sqlite-database-free-source-code.html Software Link:...

0.1AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2021/09/06 12:00 a.m.•46 views

ISC BIND DoS Vulnerability (CVE-2017-3137) - Windows

ISC BIND is prone to a denial of service DoS vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

7.5CVSS7.5AI score0.08975EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/07/30 12:00 a.m.•47 views

SourceCodester Ordering System Code Issue Vulnerability

SourceCodester Ordering System is a multi-store ordering system. In this system, customers can choose from a wide range of products, such as electronics, fashion apparel, home appliances, etc. A security vulnerability exists in SourceCodester Ordering System 1.0, which can be exploited by attacke...

9.8CVSS5.3AI score0.01874EPSS
SaveExploits1References1
OSV
OSV
•added 2021/07/23 2:15 p.m.•12 views

CVE-2021-25206

Arbitrary file upload vulnerability in SourceCodester Responsive Ordering System v 1.0 allows attackers to execute arbitrary code via the file upload to Productmodel.php...

9.8CVSS7.6AI score0.01874EPSS
SaveExploits1References1
NVD
NVD
•added 2021/07/23 2:15 p.m.•23 views

CVE-2021-25206

Arbitrary file upload vulnerability in SourceCodester Responsive Ordering System v 1.0 allows attackers to execute arbitrary code via the file upload to Productmodel.php...

9.8CVSS0.01874EPSS
SaveExploits1References1
Rows per page
Query Builder