Priority HIGH 82
Canteen Management System 1.0 is vulnerable to SQL Injection via /php_action/getOrderReport.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00934 · Published 2023-02-17 · No fix listed CWE-89
Priority HIGH 82
An arbitrary file upload vulnerability in the component /pages/save_user.php of Canteen Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00982 · Published 2022-11-15 · No fix listed CWE-434
Priority HIGH 81
A vulnerability was found in SourceCodester Canteen Management System 1.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00867 · Published 2022-10-18 · No fix listed CWE-707
Priority HIGH 75
A vulnerability was found in SourceCodester Canteen Management System.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00736 · Published 2022-11-30 · No fix listed CWE-707
Priority HIGH 71
A vulnerability classified as critical was found in SourceCodester Canteen Management System.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00613 · Published 2022-12-11 · No fix listed CWE-707
Priority HIGH 71
A vulnerability was found in SourceCodester Canteen Management System 1.0.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00844 · Published 2022-10-18 · No fix listed CWE-707
Priority HIGH 67
Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /youthappam/editfood.php.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.0087 · Published 2022-11-09 · No fix listed CWE-89
Priority HIGH 67
Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /youthappam/editclient.php.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.0087 · Published 2022-11-09 · No fix listed CWE-89
Priority HIGH 67
Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /youthappam/editcategory.php.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.0087 · Published 2022-11-09 · No fix listed CWE-89
Priority HIGH 67
Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the categoriesId parameter at /php_action/fetchSelectedCategories.php.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00863 · Published 2022-11-09 · No fix listed CWE-89
Priority HIGH 67
Canteen Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via ip/youthappam/php_action/editFile.php.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01241 · Published 2022-11-09 · No fix listed CWE-434
Priority HIGH 67
Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the productId parameter at /php_action/fetchSelectedfood.php.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00863 · Published 2022-10-28 · No fix listed CWE-89
Priority HIGH 67
Canteen Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via /youthappam/php_action/editProductImage.php.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01241 · Published 2022-10-28 · No fix listed CWE-434
Priority HIGH 67
Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the userid parameter at /php_action/fetchSelectedUser.php.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00963 · Published 2022-10-28 · No fix listed CWE-89
Priority HIGH 67
Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the userid parameter at /php_action/fetchOrderData.php.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00963 · Published 2022-10-28 · No fix listed CWE-89
Priority HIGH 67
Canteen Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via /youthappam/manage_website.php.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01362 · Published 2022-10-28 · No fix listed CWE-434
Priority MEDIUM 60
A vulnerability was found in SourceCodester Canteen Management System.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00454 · Published 2022-12-01 · No fix listed CWE-707
Priority MEDIUM 60
A vulnerability was found in SourceCodester Canteen Management System.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00454 · Published 2022-11-30 · No fix listed CWE-707
Priority MEDIUM 60
A vulnerability was found in SourceCodester Canteen Management System.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00454 · Published 2022-11-25 · No fix listed CWE-707
Priority MEDIUM 58
A cross-site scripting (XSS) vulnerability in Canteen Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.01193 · Published 2022-11-08 · No fix listed CWE-79
Priority MEDIUM 58
A vulnerability was found in SourceCodester Canteen Management System.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00454 · Published 2022-12-01 · No fix listed CWE-707
Priority MEDIUM 44
A vulnerability, which was classified as critical, has been found in SourceCodester Canteen Management System 1.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00827 · Published 2023-03-17 · No fix listed CWE-89
Priority MEDIUM 44
A vulnerability was found in SourceCodester Canteen Management System 1.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00808 · Published 2023-03-17 · No fix listed CWE-89
Priority MEDIUM 44
A vulnerability was found in SourceCodester Canteen Management System 1.0 and classified as critical.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00808 · Published 2023-03-17 · No fix listed CWE-89
Priority MEDIUM 43
A vulnerability was found in SourceCodester Canteen Management System 1.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00743 · Published 2023-02-11 · No fix listed CWE-89
Load more
THREATIST.IORead the docs