Lucene search
K

6 matches found

EUVD
EUVD
added 2026/03/27 6:31 p.m.1 views

EUVD-2026-16674

A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Actions.php file specifically the saveuser action. The application fails to properly sanitize user input supplied to the "username" parameter. This allows an authenticated attacker to inject malicious S...

8.8CVSS6AI score0.00017EPSS
Exploits1References2
NVD
NVD
added 2026/03/27 4:16 p.m.1 views

CVE-2026-30529

A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Actions.php file specifically the saveuser action. The application fails to properly sanitize user input supplied to the "username" parameter. This allows an authenticated attacker to inject malicious S...

8.8CVSS0.00017EPSS
Exploits1References1
CVE
CVE
added 2026/03/27 12:0 a.m.3 views

CVE-2026-30529

CVE-2026-30529 affects SourceCodester Online Food Ordering System v1.0, specifically in Actions.php (save_user action). The vulnerability arises from improper sanitization of the username parameter, enabling an authenticated attacker to inject malicious SQL commands. Connected sources confirm the...

8.8CVSS6AI score0.00017EPSS
Exploits1References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/03/27 12:0 a.m.0 views

CVE-2026-30529

A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Actions.php file specifically the saveuser action. The application fails to properly sanitize user input supplied to the "username" parameter. This allows an authenticated attacker to inject malicious S...

6AI score0.00017EPSS
Exploits1References2
Prion
Prion
added 2014/12/28 12:59 a.m.10 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in starnet/index.php in SyndeoCMS 3.0 and earlier allows remote attackers to hijack the authentication of administrators for requests that add user accounts via a saveuser action...

6.8CVSS7.5AI score0.00228EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2014/12/28 12:0 a.m.17 views

CVE-2012-1203

Cross-site request forgery CSRF vulnerability in starnet/index.php in SyndeoCMS 3.0 and earlier allows remote attackers to hijack the authentication of administrators for requests that add user accounts via a saveuser action...

7AI score0.00228EPSS
Exploits1References1
Rows per page
Query Builder