CVE-2024-5745

CVE-2024-5745 affects itsourcecode Bakery Online Ordering System version 1.0. The issue exists in an unknown function within /admin/modules/product/controller.php?action=add where manipulation of the image parameter enables unrestricted file uploads, allowing remote exploitation. Multiple sources...

CVE-2024-5636

CVE-2024-5636 affects itsourcecode Bakery Online Ordering System 1.0. The vulnerability is in the file report/index.php, where manipulation of the argument procduct leads to SQL injection. The issue is exploitable remotely and has been publicly disclosed. Documentation lists high-severity impact ...

CVE-2024-5635

CVE-2024-5635 affects the itsourcecode Bakery Online Ordering System 1.0. The vulnerability is in an unknown function of the file index.php , where manipulating the argument txtsearch leads to SQL injection . The attack is executable remotely and the exploit has been disclosed publicly. Connected...