CVE-2023-45346

CVE-2023-45346 affects Online Food Ordering System v1.0. Connected sources confirm multiple Unauthenticated SQL Injection vulnerabilities stemming from unsanitized input in the routers/user-router.php resource, specifically the *_role parameter, which is sent unfiltered to the database. The Red H...

CVE-2023-45338

The CVE-2023-45338 entry concerns Online Food Ordering System v1.0, with multiple unauthenticated SQL Injection flaws in the routers/add-ticket.php id parameter. The root cause is insufficient input validation, sending unfiltered input to the database. Documented impact is high on confidentiality...

CVE-2023-45345

CVE-2023-45345 : Multiple unauthenticated SQL Injection vulnerabilities in Online Food Ordering System v1.0. The issue centers on the routers/user-router.php resource, where the custom parameter named ‘*_deleted’ is not properly validated, sending unfiltered input to the database. Root cause: uns...

CVE-2023-45347

CVE-2023-45347 affects Online Food Ordering System v1.0. The vulnerability is due to unauthenticated SQL Injection in the *_verified parameter of routers/user-router.php where input is not validated before reaching the database. Multiple Red Hat and NVD records confirm the issue; exploitation sta...