Lucene search
+L

52 matches found

Positive Technologies
Positive Technologies
added 2023/02/06 12:00 a.m.16 views

PT-2023-19471 · Unknown · Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: Online Food Ordering System version v2 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "view order.php" endpoint. Recommendations: For Online Food Ordering...

6.1CVSS6.4AI score0.00461EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2023/02/06 12:00 a.m.8 views

Online Food Ordering System 跨站脚本漏洞

Online Food Ordering System is an online food ordering system. An SQL injection vulnerability exists in Online Food Ordering System, which stems from a lack of validation of externally entered SQL statements in the id parameter of the vieworder.php page. An attacker could use this vulnerability t...

6.1CVSS8.2AI score0.00461EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2023/02/06 12:00 a.m.7 views

CVE-2023-24197

Online Food Ordering System v2 was discovered to contain a SQL injection vulnerability via the id parameter at vieworder.php...

8.5AI score0.00461EPSS
SaveExploits1References2
Prion
Prion
added 2022/11/01 1:15 a.m.16 views

Sql injection

Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/vieworder...

5.8CVSS7.2AI score0.00843EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2022/11/01 12:00 a.m.8 views

Sanitization Management System SQL注入漏洞

Sanitization Management System is a sanitization management system by Carlo Montero Personal Developer. Sanitization Management System v1.0 is vulnerable to a SQL injection vulnerability that was discovered via the id parameter of /admin/?page=orders/vieworder to contain a SQL injection...

7.2CVSS7.3AI score0.00843EPSS
SaveExploits1References2
OSV
OSV
added 2022/10/27 10:15 a.m.11 views

CVE-2022-3714

A vulnerability classified as critical has been found in SourceCodester Online Medicine Ordering System 1.0. Affected is an unknown function of the file admin/?page=orders/vieworder. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. VDB-2123...

9.8CVSS5.7AI score0.00409EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/10/27 10:15 a.m.4 views

CVE-2022-3714

A vulnerability classified as critical has been found in SourceCodester Online Medicine Ordering System 1.0. Affected is an unknown function of the file admin/?page=orders/vieworder. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. VDB-2123...

9.8CVSS7.1AI score0.00409EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2022/10/11 12:00 a.m.9 views

CVE-2022-41407

Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/vieworder...

8.3AI score0.00871EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/10/11 12:00 a.m.11 views

Online Pet Shop We App SQL注入漏洞

Online Pet Shop We App is an online pet store web application by Carlo Montero Personal Developer. A security vulnerability exists in version 1.0 of Online Pet Shop We App, which stems from an SQL injection issue in the id parameter of the /admin/?page=orders/vieworder location...

7.2CVSS7.2AI score0.00871EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/10/11 12:00 a.m.11 views

Online Pet Shop We App SQL注入漏洞

Online Pet Shop We App is an online pet store web application by Carlo Montero Personal Developer. A security vulnerability exists in version 1.0 of Online Pet Shop We App, which stems from an SQL injection issue in the id parameter of the /admin/?page=orders/vieworder location...

9.8CVSS8.5AI score0.0065EPSS
SaveExploits0References3
Prion
Prion
added 2022/05/13 3:15 p.m.19 views

Sql injection

Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/admin/orders/vieworder.php?view=user&id=...

6.5CVSS7.4AI score0.00956EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2022/05/13 12:00 a.m.11 views

Merchandise Online Store SQL注入漏洞

Merchandise Online Store is a merchandise online store system. merchandise Online Store has a security vulnerability that can be exploited by attackers via /vloggersmerch/admin/orders/vieworder.php?view=user&id = SQL injection attack...

7.2CVSS7.3AI score0.00956EPSS
SaveExploits1References2
Rows per page
Query Builder