PT-2021-24521

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.15 through 5.11.16 Description: The issue is related to the ordering in queued write lock slowpath in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2021-28512

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.33 Description The issue is related to the ordering in queued write lock slowpath in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-28515

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.15 through 5.11.16 Description The issue is related to the ordering in queued write lock slowpath in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-28516

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.189 Description The issue is related to the ordering in queued write lock slowpath in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior...

Gadget Works Online Ordering System 1.0 Cross Site Scripting

Exploit Title: Gadget Works Online Ordering System 1.0 - 'Category' Persistent Cross-Site Scripting XSS Date: 24-05-2021 Exploit Author: Vinay H C Vendor Homepage: https://www.sourcecodester.com/ Software Link:...

Gadget Works Online Ordering System 1.0 - 'Category' Persistent Cross-Site Scripting (XSS)

Exploit Title: Gadget Works Online Ordering System 1.0 - 'Category' Persistent Cross-Site Scripting XSS Date: 24-05-2021 Exploit Author: Vinay H C Vendor Homepage: https://www.sourcecodester.com/ Software Link:...

Gadget Works Online Ordering System 1.0 - (Category) Persistent Cross-Site Scripting Vulnerability

Exploit Title: Gadget Works Online Ordering System 1.0 - 'Category' Persistent Cross-Site Scripting XSS Exploit Author: Vinay H C Vendor Homepage: https://www.sourcecodester.com/ Software Link: https://www.sourcecodester.com/php/13093/gadget-works-online-ordering-system-phpmysqli.html Version: 1....

File upload vulnerability in responsive-ordering-system

responsive-ordering-system online ordering system with POS and kitchen-side user interface. A file upload vulnerability exists in responsive-ordering-system, which can be exploited by an attacker to gain control of the server...

Gadget Works Online Ordering System 1.0 SQL Injection / Code Execution

Exploit Title: Gadget works online ordering system - Authentication Bypass SQLi Date: 03/05/2021 Exploit Author: Richard Jones Vendor Homepage: https://www.sourcecodester.com/php/13093/gadget-works-online-ordering-system-phpmysqli.html Version: 1.0 Tested on: Windows 10 build 19041 + xampp 3.2.4...

Logic Flaw Vulnerability in Yazi Cloud Food Ordering System

Yazi cloud technology is a technology research and development innovation enterprise with rich experience in "Internet +" project diagnosis, planning, research and development, and landing as a whole. A logic flaw exists in the Yaziyun food ordering system, which can be exploited by attackers to...

Sea Cormorant Technology hospital food ordering applet has a flawed logic vulnerability

Guangzhou Hai Cormorant Network Technology Co., Ltd, referred to as: Hai Cormorant Technology, was founded on May 19, 2014, focusing on the healthcare industry, the main business includes the development and operation of intelligent mobile service platforms for WeChat Service Number, Alipay Life...

Online Ordering System SQL Injection (CVE-2021-28295)

An SQL injection vulnerability exists in Online Ordering System. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2021-28294

Online Ordering System 1.0 is vulnerable to arbitrary file upload through /onlineordering/GPST/store/initiateorder.php, which may lead to remote code execution RCE...

CVE-2021-28295

Online Ordering System 1.0 is vulnerable to unauthenticated SQL injection through /onlineordering/GPST/admin/design.php, which may lead to database information disclosure...

CVE-2021-28294

Online Ordering System 1.0 is vulnerable to arbitrary file upload through /onlineordering/GPST/store/initiateorder.php, which may lead to remote code execution RCE...

CVE-2021-28295

Online Ordering System 1.0 is vulnerable to unauthenticated SQL injection through /onlineordering/GPST/admin/design.php, which may lead to database information disclosure...

Sql injection

Online Ordering System 1.0 is vulnerable to unauthenticated SQL injection through /onlineordering/GPST/admin/design.php, which may lead to database information disclosure...

Design/Logic Flaw

Online Ordering System 1.0 is vulnerable to arbitrary file upload through /onlineordering/GPST/store/initiateorder.php, which may lead to remote code execution RCE...

CVE-2021-28295

Online Ordering System 1.0 is vulnerable to unauthenticated SQL injection through /onlineordering/GPST/admin/design.php, which may lead to database information disclosure...

CVE-2021-28294

Online Ordering System 1.0 is vulnerable to arbitrary file upload through /onlineordering/GPST/store/initiateorder.php, which may lead to remote code execution RCE...