Lucene search
K

17 matches found

EUVD
EUVD
added 2026/04/29 5:15 p.m.2 views

EUVD-2026-26266

A vulnerability was determined in SourceCodester Pizzafy Ecommerce System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/vieworder.php of the component GET Parameter Handler. Executing a manipulation of the argument ID can lead to sql injection. The attack may ...

5.8CVSS5AI score0.00039EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-30990

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.0025EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-28256

Malicious code in bioql PyPI...

6.1CVSS6.3AI score0.00281EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/05/23 1:55 a.m.2 views

CVE-2023-24197

Online Food Ordering System v2 was discovered to contain a SQL injection vulnerability via the id parameter at vieworder.php...

6.1CVSS8.3AI score0.00281EPSS
Exploits1References1
Cvelist
Cvelist
added 2024/03/13 6:0 p.m.20 views

CVE-2024-2418 SourceCodester Best POS Management System view_order.php sql injection

A vulnerability was found in SourceCodester Best POS Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /vieworder.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The...

6.5CVSS7.1AI score0.00152EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2024/03/04 12:31 a.m.21 views

CVE-2024-2153 SourceCodester Online Mobile Management Store view_order.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Online Mobile Management Store 1.0. This affects an unknown part of the file /admin/orders/vieworder.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The...

6.5CVSS6.8AI score0.00136EPSS
Exploits1References3
Prion
Prion
added 2023/03/09 9:15 p.m.12 views

Sql injection

Online Pizza Ordering System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/vieworder.php...

7.5CVSS9.7AI score0.0025EPSS
Exploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/03/09 12:0 a.m.12 views

CVE-2023-27210

Online Pizza Ordering System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/vieworder.php...

9.8AI score0.0025EPSS
Exploits1References2
CVE
CVE
added 2023/03/09 12:0 a.m.93 views

CVE-2023-27210

CVE-2023-27210 concerns Online Pizza Ordering System 1.0, where a SQL injection is reported via the id parameter in /admin/view_order.php. Multiple sources (NVD, Red Hat, CNNVD, CVE listing) consistently describe a SQLi issue in the admin view_order endpoint. The NVD entry assigns a severe CVSS v...

9.8CVSS9.7AI score0.0025EPSS
Exploits1References2Affected Software1
CNNVD
CNNVD
added 2023/03/09 12:0 a.m.2 views

Online Pizza Ordering System SQL注入漏洞

Online Pizza Ordering System is an online pizza ordering system by Carlo Montero, an individual developer. A security vulnerability exists in Online Pizza Ordering System version 1.0, which is caused by a SQL injection vulnerability via the id parameter in /admin/vieworder.php...

9.8CVSS8.7AI score0.0025EPSS
Exploits1References3
CNVD
CNVD
added 2023/02/08 12:0 a.m.17 views

Online Food Ordering System SQL Injection Vulnerability (CNVD-2023-07974)

Online Food Ordering System is an online food ordering system. An SQL injection vulnerability exists in Online Food Ordering System, which stems from a lack of validation of externally entered SQL statements in the id parameter of the vieworder.php page. An attacker could use this vulnerability t...

6.1CVSS3.1AI score0.00281EPSS
Exploits1References1
Prion
Prion
added 2023/02/06 3:15 p.m.9 views

Sql injection

Online Food Ordering System v2 was discovered to contain a SQL injection vulnerability via the id parameter at vieworder.php...

5.8CVSS6.5AI score0.00281EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2023/02/06 12:0 a.m.38 views

CVE-2023-24197

CVE-2023-24197 concerns Online Food Ordering System v2, where a SQL injection exists in the view_order.php endpoint via the id parameter. The root cause is insufficient validation of externally supplied SQL statements, allowing potentially unauthorized database access and data exposure as indicat...

6.1CVSS6.6AI score0.00281EPSS
Exploits1References2Affected Software1
CNVD
CNVD
added 2022/05/17 12:0 a.m.12 views

Merchandise Online Store SQL注入漏洞(CNVD-2022-40269)

Merchandise Online Store is a merchandise online store system. merchandise Online Store has a security vulnerability that can be exploited by attackers via /vloggersmerch/admin/orders/vieworder.php?view=user&id = SQL injection attack...

7.2CVSS4.4AI score0.00274EPSS
Exploits1References1
OSV
OSV
added 2022/05/13 3:15 p.m.0 views

CVE-2022-30400

Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/admin/orders/vieworder.php?view=user&id=...

7.2CVSS7.1AI score0.00274EPSS
Exploits1References1
NVD
NVD
added 2006/10/03 4:3 a.m.9 views

CVE-2006-5107

Multiple SQL injection vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to execute arbitrary SQL commands via 1 the username parameter in admin/forgotpass.php, 2 the orderid parameter in vieworder.php, 3 the viewdoc parameter in viewdoc.php, and 4 the orderid parameter in...

7.5CVSS8.5AI score0.0029EPSS
Exploits1References4
Cvelist
Cvelist
added 2006/10/02 8:0 p.m.15 views

CVE-2006-5107

Multiple SQL injection vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to execute arbitrary SQL commands via 1 the username parameter in admin/forgotpass.php, 2 the orderid parameter in vieworder.php, 3 the viewdoc parameter in viewdoc.php, and 4 the orderid parameter in...

8.5AI score0.0029EPSS
Exploits1References4
Rows per page
Query Builder