Vendors / Fast Food Ordering System Project Fast Food Ordering System Project Records 15 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2 CVSS 9.0–10.0
CVSS high 8 CVSS 7.0–8.9
Exploited now Fast Food Ordering System Project records in CISA KEV No Fast Food Ordering System Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 72
Fast Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the component /fastfood/purchase.php.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00914 · Published 2022-11-01 · No fix listed CWE-89
Priority HIGH 71
A vulnerability was found in oretnom23 Fast Food Ordering System.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00754 · Published 2022-08-27 · No fix listed CWE-89
Priority MEDIUM 58
A vulnerability, which was classified as problematic, was found in oretnom23 Fast Food Ordering System.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00552 · Published 2022-08-06 · No fix listed CWE-79
Priority MEDIUM 55
A vulnerability classified as problematic has been found in Fast Food Ordering System 1.0.
CVSS 3.1 MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00611 · Published 2022-06-03 · No fix listed CWE-79
Priority MEDIUM 44
Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/menus/view_menu.php?id=.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01096 · Published 2022-06-14 · No fix listed CWE-89
Priority MEDIUM 42
Fast Food Ordering System v1.0 is vulnerable to Delete any file.
CVSS 3.1 CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01225 · Published 2022-06-14 · No fix listed CWE-22
Priority LOW 34
Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/menus/manage_menu.php?id=.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00971 · Published 2022-06-14 · No fix listed CWE-89
Priority LOW 34
Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/categories/manage_category.php?id=.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00971 · Published 2022-06-14 · No fix listed CWE-89
Priority LOW 34
Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/sales/receipt.php?id=.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00971 · Published 2022-06-14 · No fix listed CWE-89
Priority LOW 34
Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/classes/Master.php?f=delete_category.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00971 · Published 2022-06-14 · No fix listed CWE-89
Priority LOW 34
Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/categories/view_category.php?id=.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00971 · Published 2022-06-14 · No fix listed CWE-89
Priority LOW 34
Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/classes/Master.php?f=delete_menu.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00971 · Published 2022-06-14 · No fix listed CWE-89
Priority LOW 28
A cross-site scripting (XSS) vulnerability in /fastfood/purchase.php of Fast Food Ordering System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the customer parameter.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00575 · Published 2022-11-01 · No fix listed CWE-79
Priority LOW 27
A vulnerability, which was classified as problematic, has been found in oretnom23 Fast Food Ordering System.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00412 · Published 2022-08-27 · No fix listed CWE-79
Priority LOW 25
Fast Food Ordering System v1.0 was discovered to contain a persistent cross-site scripting (XSS) vulnerability via the component /ffos/classes/Master.php?f=save_category.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.0053 · Published 2022-07-14 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
Critical2 High8 Medium5 Low0 No CVSS0