CVE-2021-38699-Reflected-XSS

CVE-2021-38699 : TastyIgniter v3.0.7 レストランCMSにおける複数の反射型XSS 認証済み反射型XSSが、TastyIgniter Adminダッシュボードのバージョン3.0.7に存在します。 https://vulners.com/cve/CVE-2021-38699 PoC: Adminダッシュボード start パラメータ: POST http://cvefarm.local/admin/dashboard HTTP/1.1 User-Agent: Mozilla/5.0 X11; Linux x8664; rv:78.0...

CVE-2021-38699-Stored-XSS

CVE-2021-38699: TastyIgniter v3.0.7 レストランCMSにおける保存型XSS TastyIgniter v3.0.7 レストランCMSのWebアプリケーションのシステムログセクションには、認証済みの保存型クロスサイトスクリプティングが存在します。 https://vulners.com/cve/CVE-2021-38699 POC 1. Webアプリケーション内の別の場所で反射型クロスサイトスクリプティングを実行する https://github.com/HuskyHacks/CVE-2021-38699-Reflected-XSS を参照 2...

CVE-2021-38817-Remote-OS-Command-Injection

CVE-2021-38817-リモートOSコマンドインジェクション TastyIgniter v3.0.7 Sendmail Webパートにおける認証済みリモートOSコマンドインジェクション/リモートコード実行 CVE-2021-38817 TastyIgniter v3.0.7 レストランCMS WebアプリケーションのSendmail設定メニューには、認証済みリモートOSコマンドインジェクションの脆弱性が存在します。Sendmail Pathパラメータは適切にサニタイズされておらず、フィールドに入力されている /usr/sbin/sendmail -bs...

CVE-2021-39287-Stored-XSS

CVE-2021-39287-Stored-XSS CVE-2021-39287 TastyIgniter v3.0.7 Restaurtant CMS の保存型XSS TastyIgniter v3.0.7 Restaurant CMSには、保存型クロスサイトスクリプティング（XSS）の脆弱性が存在します。/admin/locations/settings にある説明入力フィールドは適切にサニタイズされておらず、任意のコードをサイト内に保存することができます。 影響を受けるコンポーネント URL: /admin/locations/settings POC...

EUVD-2018-21657

Wecodex Restaurant CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the username parameter. Attackers can send POST requests to the login endpoint with malicious SQL payloads using boolean-based blin...

CVE-2018-25185

Wecodex Restaurant CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the username parameter. Attackers can send POST requests to the login endpoint with malicious SQL payloads using boolean-based blin...

CVE-2018-25185 Wecodex Restaurant CMS 1.0 SQL Injection via Login

Wecodex Restaurant CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the username parameter. Attackers can send POST requests to the login endpoint with malicious SQL payloads using boolean-based blin...

CVE-2018-25185

Wecodex Restaurant CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the username parameter. Attackers can send POST requests to the login endpoint with malicious SQL payloads using boolean-based blin...

Wecodex Restaurant CMS SQL注入漏洞

Wecodex Restaurant CMS is a catering management system developed by Wecodex Corporation. Version 1.0 of Wecodex Restaurant CMS has a SQL injection vulnerability. This vulnerability stems from insufficient validation of the username parameter input, which may lead to SQL injection attacks...

CVE-2018-25185: Improper Neutralization of Special Elements used in an SQL Command

Wecodex Restaurant CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the username parameter. Attackers can send POST requests to the login endpoint with malicious SQL payloads using boolean-based blin...

Wecodex Restaurant CMS 'Login' SQL Injection Vulnerability

Wecodex Restaurant CMS is a management system. A SQL injection vulnerability exists in Wecodex Restaurant CMS 'Login', which can be exploited by attackers to execute arbitrary SQL commands...

Wecodex Restaurant CMS 1.0 SQL Injection

Exploit Title: Wecodex Restaurant CMS 1.0 - 'Login' SQL Injection Dork: N/A Date: 2018-05-23 Exploit Author: Azkan Mustafa AkkuA AkkuS Vendor : Wecodex Solutions Vendor Homepage: https://www.wecodex.com/item/view/restaurant-system-in-php-and-mysql/6 Version: 1.0 Category: Webapps Tested on: Kali...

Wecodex Restaurant CMS 1.0 - Login SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Wecodex Restaurant CMS 1.0 - 'Login' SQL Injection Exploit Author: Özkan Mustafa Akkuş AkkuS Vendor : Wecodex Solutions Vendor Homepage: https://www.wecodex.com/item/view/restaurant-system-in-php-and-mysql/6 Version: 1.0 Categor...

Wecodex Restaurant CMS 1.0 - Login SQL Injection

Wecodex Restaurant CMS 1.0 - Login SQL Injection Exploit Title: Wecodex Restaurant CMS 1.0 - 'Login' SQL Injection Dork: N/A Date: 2018-05-23 Exploit Author: Özkan Mustafa Akkuş AkkuS Vendor : Wecodex Solutions Vendor Homepage: https://www.wecodex.com/item/view/restaurant-system-in-php-and-mysql/...

Restaurant cms getshell vulnerabilities-vulnerability warning-the black bar safety net

Vulnerability type: code execution Keywords: inurl:index. php? m=shopcar The problem is in the/install/index. php file. In the program after the installation, will be in the program root directory generated under the install. lock file. And the/install/index. php in to determine whether there is...

Treat technology restaurant cms vulnerability(getshell)-vulnerability warning-the black bar safety net

The problem is in the/install/index. php file. In the program after the installation, will be in the program root directory generated under the install. lock file. And the/install/index. php in to determine whether there is install. lock when an error occurs. ? php iffileexists"../install. lock"...