Wecodex Restaurant CMS 'Login' SQL Injection Vulnerability

Wecodex Restaurant CMS is a management system. A SQL injection vulnerability exists in Wecodex Restaurant CMS 'Login', which can be exploited by attackers to execute arbitrary SQL commands...

Wecodex Restaurant CMS 1.0 - Login SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Wecodex Restaurant CMS 1.0 - 'Login' SQL Injection Exploit Author: Özkan Mustafa Akkuş AkkuS Vendor : Wecodex Solutions Vendor Homepage: https://www.wecodex.com/item/view/restaurant-system-in-php-and-mysql/6 Version: 1.0 Categor...

Wecodex Restaurant CMS 1.0 SQL Injection

Exploit Title: Wecodex Restaurant CMS 1.0 - 'Login' SQL Injection Dork: N/A Date: 2018-05-23 Exploit Author: Azkan Mustafa AkkuA AkkuS Vendor : Wecodex Solutions Vendor Homepage: https://www.wecodex.com/item/view/restaurant-system-in-php-and-mysql/6 Version: 1.0 Category: Webapps Tested on: Kali...

Wecodex Restaurant CMS 1.0 - Login SQL Injection

Wecodex Restaurant CMS 1.0 - Login SQL Injection Exploit Title: Wecodex Restaurant CMS 1.0 - 'Login' SQL Injection Dork: N/A Date: 2018-05-23 Exploit Author: Özkan Mustafa Akkuş AkkuS Vendor : Wecodex Solutions Vendor Homepage: https://www.wecodex.com/item/view/restaurant-system-in-php-and-mysql/...

Karenderia Multiple Restaurant System < 4.5 - Blind SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Karenderia Multiple Restaurant System 4.5 - Blind SQL injection Google Dork: N/A Date: 2018-05-10 Exploit Author: telahdihapus Email Author: email protected Vendor Homepage: https://codecanyon.net/user/bastikikang Software Link:...

Chili’s Doesn’t Leave Data Breach on the Back Burner

Southwestern/Texas-themed restaurant chain Chili’s has become the latest victim of a data breach involving the heist of point-of-sale information from payment cards — and the alacrity with which it has admitted the incident is notable. Hackers had unauthorized access to payment-card data between...

Zomato: XSS in "explore-keywords-dropdown" results.

It seems that people have exploited this vulnerability before on this website, however, it remains unpatched, so here I am reporting the vulnerability. A XSS vulnerability exists when a restaurant or dish is created with a malicious name. The title of the dish or restaurant is not properly filter...

CyberCentral Summit 2018 in Prague

Almost whole last week I spent in Prague at CyberCentral conference. It was a pretty unique experience for me. I was for the first time at the International conference as a speaker. And not only I presented my report there, but lead the round table on Vulnerability Management and participated in ...

restaurant-edem.com XSS vulnerability

Open Bug Bounty ID: OBB-567396 Description| Value ---|--- Affected Website:| restaurant-edem.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

restaurant-schaeferhof.fr XSS vulnerability

Open Bug Bounty ID: OBB-567286 Description| Value ---|--- Affected Website:| restaurant-schaeferhof.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

alsalam-restaurant.com XSS vulnerability

Open Bug Bounty ID: OBB-566340 Description| Value ---|--- Affected Website:| alsalam-restaurant.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Friday Squid Blogging: Japanese "Dude Food" Includes Squid

This seems to be a trend. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...

Joomla vRestaurant 1.9.4 SQL Injection

Title: Joomla! vRestaurant 1.9.4 - SQL injection Credit: Bilal KARDADOU Vendor: https://www.wdmtech.com URL: https://extensions.joomla.org/extensions/extension/vertical-markets/food-a-beverage/vrestaurant/ Product: 'Joomla! vRestaurant 1.9.4' Developer: WDMtech Extension type: Plugin Last updated...

Zomato: [www.zomato.com] Privilege Escalation - /php/restaurant_menus_handler.php

Introduction In the following ██████████ the endpoint /php/restaurantmenushandler.php was found. This endpoint is meant solely to be accessible for admins, however due to insufficient protections normal users can access this endpoint too. This results in any Zomato user being able to edit and...

Sql injection

Zomato Clone Script allows SQL Injection via the restaurant-menu.php resid parameter...

CVE-2017-15993

Zomato Clone Script allows SQL Injection via the restaurant-menu.php resid parameter...

CVE-2017-15993

Zomato Clone Script allows SQL Injection via the restaurant-menu.php resid parameter...

CVE-2017-15993

CVE-2017-15993 : Zomato Clone Script is vulnerable to SQL Injection in the restaurant-menu.php resid parameter. The issue allows an attacker to inject SQL commands, potentially revealing or modifying database data. This vulnerability is documented across multiple sources (NVD/CVE records) with hi...

Zomato Clone Script SQL Injection Vulnerability

Zomato Clone Script is a clone script. A SQL injection vulnerability exists in the restaurant-menu.php resid parameter of Zomato Clone Script, which can be exploited by an attacker to access or modify database data...

restaurant-pfannenstiel.ch XSS vulnerability

Vulnerable URL: http://www.restaurant-pfannenstiel.ch/frmkontakt.cfm?Email=info%27%22%3E%3Cimg%20src=x%20onerror=alert%22OPENBUGBOUNTY%22;%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Ale...