dingfanzu security vulnerabilities

dingfanzu is a php-based takeout ordering website by gk2007 individual developer. A security vulnerability exists in dingfanzu version 1.0, which is caused by insufficient filtering of the id parameter in operateOrder.php, which may lead to SQL injection...

dingfanzu security vulnerabilities

dingfanzu is a php-based takeout ordering website by gk2007 individual developer. A security vulnerability exists in dingfanzu version 1.0, which originates from a cross-site request forgery CSRF vulnerability contained in /admin/doAdminAction.php?act=addCate...