Lucene search

K
Online Food Ordering System ProjectOnline Food Ordering System2.0

15 matches found

CVE
CVE
added 2023/02/06 3:15 p.m.109 views

CVE-2023-24192

Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the redirect parameter in login.php.

6.1CVSS6AI score0.0009EPSS
CVE
CVE
added 2023/02/06 3:15 p.m.107 views

CVE-2023-24195

Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the page parameter in index.php.

6.1CVSS6AI score0.0009EPSS
CVE
CVE
added 2023/02/06 3:15 p.m.99 views

CVE-2023-24194

Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the page parameter in navbar.php.

6.1CVSS6AI score0.0009EPSS
CVE
CVE
added 2023/02/06 3:15 p.m.97 views

CVE-2023-24191

Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the redirect parameter in signup.php.

6.1CVSS6AI score0.0009EPSS
CVE
CVE
added 2023/02/13 9:15 p.m.66 views

CVE-2023-24647

Food Ordering System v2.0 was discovered to contain a SQL injection vulnerability via the email parameter.

7.5CVSS7.8AI score0.00062EPSS
CVE
CVE
added 2023/03/16 1:15 p.m.47 views

CVE-2023-1432

A vulnerability was found in SourceCodester Online Food Ordering System 2.0 and classified as critical. Affected by this issue is some unknown functionality of the file /fos/admin/ajax.php?action=save_settings of the component POST Request Handler. The manipulation leads to improper access controls...

9.8CVSS8.5AI score0.00042EPSS
CVE
CVE
added 2024/09/09 4:15 p.m.38 views

CVE-2024-8604

A vulnerability classified as problematic has been found in SourceCodester Online Food Ordering System 2.0. This affects an unknown part of the file index.php of the component Create an Account Page. The manipulation of the argument First Name/Last Name leads to cross site scripting. It is possible...

6.9CVSS4.6AI score0.00036EPSS
CVE
CVE
added 2023/01/17 8:15 a.m.37 views

CVE-2023-0332

A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been classified as critical. Affected is an unknown function of the file admin/manage_user.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit h...

9.8CVSS8.9AI score0.00057EPSS
CVE
CVE
added 2023/05/05 2:15 a.m.37 views

CVE-2023-30122

An arbitrary file upload vulnerability in the component /admin/ajax.php?action=save_menu of Online Food Ordering System v2.0 allows attackers to execute arbitrary code via uploading a crafted PHP file.

9.8CVSS9.5AI score0.00115EPSS
CVE
CVE
added 2023/01/12 10:15 p.m.36 views

CVE-2023-0256

A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been classified as critical. Affected is an unknown function of the file /fos/admin/ajax.php?action=login of the component Login Page. The manipulation of the argument Username leads to sql injection. It is possible...

9.8CVSS8.3AI score0.00045EPSS
CVE
CVE
added 2023/01/12 10:15 p.m.35 views

CVE-2023-0257

A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /fos/admin/index.php?page=menu of the component Menu Form. The manipulation of the argument Image with the input lea...

9.8CVSS7.1AI score0.00045EPSS
CVE
CVE
added 2023/01/12 10:15 p.m.35 views

CVE-2023-0258

A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Category List Handler. The manipulation of the argument Reason with the input "> leads to cross site scripting. The...

6.1CVSS4.7AI score0.00056EPSS
CVE
CVE
added 2023/02/06 3:15 p.m.33 views

CVE-2023-24197

Online Food Ordering System v2 was discovered to contain a SQL injection vulnerability via the id parameter at view_order.php.

6.1CVSS6.6AI score0.00057EPSS
CVE
CVE
added 2021/10/29 5:15 p.m.32 views

CVE-2021-41644

Remote Code Exection (RCE) vulnerability exists in Sourcecodester Online Food Ordering System 2.0 via a maliciously crafted PHP file that bypasses the image upload filters.

9.8CVSS9.5AI score0.00762EPSS
CVE
CVE
added 2023/02/13 9:15 p.m.32 views

CVE-2023-24646

An arbitrary file upload vulnerability in the component /fos/admin/ajax.php of Food Ordering System v2.0 allows attackers to execute arbitrary code via a crafted PHP file.

9.8CVSS9.5AI score0.00115EPSS