CVE-2024-13070

The CVE-2024-13070 entry concerns CodeAstro Online Food Ordering System 1.0. The vulnerability is described as a SQL injection in the Update User Page, specifically the /admin/update_users.php functionality, where manipulating the argument (user_upd or similar) enables remote exploitation. Multip...

CVE-2024-0423

CVE-2024-0423 affects CodeAstro Online Food Ordering System v1.0. The vulnerability is in the dishes.php functionality, where manipulation of the res_id parameter causes cross-site scripting. It may be exploited remotely and the public exploit has been disclosed. Remediation details are not provi...

CVE-2024-13067

CVE-2024-13067 affects CodeAstro Online Food Ordering System 1.0, with improper access controls on the /admin/all_users.php page. The vulnerability allows remote initiation and has had exploits disclosed publicly. Connected sources consistently identify the affected component and the access-contr...