12 matches found
CVE-2019-18414
Sourcecodester Restaurant Management System 1.0 is affected by an admin/staff-exec.php Cross Site Request Forgery vulnerability due to a lack of CSRF protection. This could lead to an attacker tricking the administrator into executing arbitrary code or adding a staff entry via a crafted HTML page...
CVE-2019-18415
Sourcecodester Restaurant Management System 1.0 allows XSS via the "send a message" screen...
CVE-2019-18416
Sourcecodester Restaurant Management System 1.0 allows XSS via the Last Name field of a member...
CVE-2019-18417
Sourcecodester Restaurant Management System 1.0 allows an authenticated attacker to upload arbitrary files that can result in code execution. The issue occurs because the application fails to adequately sanitize user-supplied input, e.g., "add a new food" allows .php files...
CVE-2019-18417: Unrestricted Upload of File with Dangerous Type
Sourcecodester Restaurant Management System 1.0 allows an authenticated attacker to upload arbitrary files that can result in code execution. The issue occurs because the application fails to adequately sanitize user-supplied input, e.g., "add a new food" allows .php files...
PT-2019-15399
Name of the Vulnerable Software and Affected Versions Sourcecodester Restaurant Management System version 1.0 Description The issue allows for cross-site scripting XSS attacks through the Last Name field of a member. This occurs when an attacker injects malicious code into the Last Name field,...
PT-2019-15400
Name of the Vulnerable Software and Affected Versions Sourcecodester Restaurant Management System version 1.0 Description The issue allows an authenticated attacker to upload arbitrary files, potentially resulting in code execution. This occurs due to inadequate sanitization of user-supplied inpu...
PT-2019-15397
Name of the Vulnerable Software and Affected Versions Sourcecodester Restaurant Management System version 1.0 Description The issue is related to a Cross Site Request Forgery vulnerability in the admin/staff-exec.php file due to a lack of CSRF protection. This could allow an attacker to trick the...
CVE-2019-18415: Improper Neutralization of Input During Web Page Generation
Sourcecodester Restaurant Management System 1.0 allows XSS via the "send a message" screen...
CVE-2019-18414: Cross-Site Request Forgery (CSRF)
Sourcecodester Restaurant Management System 1.0 is affected by an admin/staff-exec.php Cross Site Request Forgery vulnerability due to a lack of CSRF protection. This could lead to an attacker tricking the administrator into executing arbitrary code or adding a staff entry via a crafted HTML page...
PT-2019-15398
Name of the Vulnerable Software and Affected Versions Sourcecodester Restaurant Management System version 1.0 Description The issue allows for cross-site scripting XSS attacks through the "send a message" screen. This means an attacker could potentially inject malicious scripts into the website,...