2 matches found
CVE-2023-45336: Improper Neutralization of Special Elements used in an SQL Command
Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'password' parameter of the routers/router.php resource does not validate the characters received and they are sent unfiltered to the database...
9.8CVSS8.2AI score0.007EPSS
SaveExploits1References2
PT-2023-29511
Name of the Vulnerable Software and Affected Versions Online Food Ordering System version 1.0 Description The Online Food Ordering System is affected by multiple Unauthenticated SQL Injection vulnerabilities. The issue arises from the password parameter of the routers/router.php resource, which...
9.8CVSS5.7AI score0.007EPSS
SaveExploits1References7
20