CVE-2023-45344

The CVE-2023-45344 entry concerns Online Food Ordering System v1.0, which is vulnerable to multiple unauthenticated SQL injection flaws. The vulnerability specifically affects the routers/user-router.php resource, where the *_balance parameter is not properly validated, allowing unfiltered input ...

CVE-2024-57328

The CVE-2024-57328 entry describes a SQL Injection flaw in the login form of Online Food Ordering System v1.0. The issue arises from unsanitized username and password inputs, enabling attackers to inject SQL and bypass authentication to gain unauthorized access. Affected software/component: Onlin...

CVE-2023-45340

CVE-2023-45340 affects Online Food Ordering System v1.0; the routers/details-router.php resource’s phone parameter is vulnerable to unauthenticated SQL Injection due to unvalidated input sent to the database. Public-facing CVSS v3.1 shows a CRITICAL (9.8) score with network access, low attack com...

CVE-2023-45342

CVE-2023-45342 affects Online Food Ordering System v1.0 and describes multiple unauthenticated SQL injection vulnerabilities in routers/register-router.php, caused by insufficient validation of the phone parameter, which is sent unfiltered to the database. Red Hat’s advisory mirrors the descripti...

CVE-2023-45343

CVE-2023-45343 : Multiple unauthenticated SQL Injection vulnerabilities affect Online Food Ordering System v1.0. The issue stems from insufficient validation of the ticket_id parameter in routers/ticket-message.php, which passes unfiltered input to the database. Public sources in the connected do...

CVE-2023-45325

The CVE-2023-45325 entry concerns Online Food Ordering System v1.0 with multiple unauthenticated SQL Injection vulnerabilities. The address parameter of routers/add-users.php is not properly validated, allowing unfiltered data to reach the database. The vulnerability is rated at CVSSv3.1, base sc...

CVE-2023-45341

CVE-2023-45341 affects Online Food Ordering System v1.0. The vulnerability is multiple unauthenticated SQL injections in the routers/menu-router.php resource, triggered by the unvalidated and unfiltered characters in the “*_price” parameter that are sent to the database. Root cause: lack of input...

CVE-2023-45323

CVE-2023-45323 affects Online Food Ordering System v1.0. The vulnerability is in the routers/add-item.php resource, where the name parameter is not properly validated, allowing unauthenticated SQL Injection. Multiple sources describe this issue as unauthenticated injections with the potential for...

CVE-2023-45334

Affected software: Online Food Ordering System v1.0. Vulnerability: multiple unauthenticated SQL injection flaws in the routers/edit-orders.php resource, caused by inadequate validation/filtration of the status parameter. Impact (as stated): attacker can send unfiltered input to the database; CVS...

CVE-2025-4936

CVE-2025-4936 affects the Projectworlds Online Food Ordering System v1.0. Affected component: the function in the file /admin-page.php where the argument 1_price can be manipulated, leading to an SQL injection . It is exploitable remotely and the exploit has been disclosed publicly. Connected sou...

CVE-2023-45336

CVE-2023-45336 affects Online Food Ordering System v1.0. The vulnerability consists of multiple unauthenticated SQL injection flaws in the routers/router.php password parameter, which does not validate input and sends unfiltered data to the database. Impact is reported as high across confidential...

CVE-2026-2136

CVE-2026-2136 affects projectworlds Online Food Ordering System v1.0. The vulnerability resides in an unknown function of /view-ticket.php where manipulating the ID parameter enables SQL injection, with remote exploitation demonstrated by published exploits. Multiple sources (NVD, Red Hat, CVE li...

CVE-2025-11604

CVE-2025-11604 affects ProjectWorlds Online Ordering Food System 1.0. The vulnerability arises from improper handling of the Status parameter in /all-orders.php, allowing an SQL injection via remote exploitation. Public exploit disclosed. Multiple sources (NVD, Red Hat, EUVD, CNNVD, CVE listing) ...