Priority MEDIUM 44
A vulnerability, which was classified as critical, has been found in SourceCodester Canteen Management System 1.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00827 · Published 2023-03-17 · No fix listed CWE-89
Priority MEDIUM 44
A vulnerability was found in SourceCodester Canteen Management System 1.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00808 · Published 2023-03-17 · No fix listed CWE-89
Priority MEDIUM 44
A vulnerability was found in SourceCodester Canteen Management System 1.0 and classified as critical.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00808 · Published 2023-03-17 · No fix listed CWE-89
Priority HIGH 82
Canteen Management System 1.0 is vulnerable to SQL Injection via /php_action/getOrderReport.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00934 · Published 2023-02-17 · No fix listed CWE-89
Priority MEDIUM 43
A vulnerability was found in SourceCodester Canteen Management System 1.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00743 · Published 2023-02-11 · No fix listed CWE-89
Priority LOW 36
A vulnerability was found in SourceCodester Canteen Management System 1.0.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00717 · Published 2023-02-06 · No fix listed CWE-89
Priority LOW 25
A vulnerability has been found in SourceCodester Canteen Management System 1.0 and classified as problematic.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00613 · Published 2023-01-29 · No fix listed CWE-79
Priority HIGH 71
A vulnerability classified as critical was found in SourceCodester Canteen Management System.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00613 · Published 2022-12-11 · No fix listed CWE-707
Priority MEDIUM 58
A vulnerability was found in SourceCodester Canteen Management System.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00454 · Published 2022-12-01 · No fix listed CWE-707
Priority MEDIUM 60
A vulnerability was found in SourceCodester Canteen Management System.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00454 · Published 2022-12-01 · No fix listed CWE-707
Priority MEDIUM 60
A vulnerability was found in SourceCodester Canteen Management System.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00454 · Published 2022-11-30 · No fix listed CWE-707
Priority HIGH 75
A vulnerability was found in SourceCodester Canteen Management System.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00736 · Published 2022-11-30 · No fix listed CWE-707
Priority MEDIUM 60
A vulnerability was found in SourceCodester Canteen Management System.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00454 · Published 2022-11-25 · No fix listed CWE-707
Priority HIGH 82
An arbitrary file upload vulnerability in the component /pages/save_user.php of Canteen Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00982 · Published 2022-11-15 · No fix listed CWE-434
Priority LOW 36
An arbitrary file upload vulnerability in the image upload function of Canteen Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01081 · Published 2022-11-14 · No fix listed CWE-434
Priority HIGH 67
Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /youthappam/editfood.php.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.0087 · Published 2022-11-09 · No fix listed CWE-89
Priority HIGH 67
Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /youthappam/editclient.php.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.0087 · Published 2022-11-09 · No fix listed CWE-89
Priority HIGH 67
Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /youthappam/editcategory.php.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.0087 · Published 2022-11-09 · No fix listed CWE-89
Priority HIGH 67
Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the categoriesId parameter at /php_action/fetchSelectedCategories.php.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00863 · Published 2022-11-09 · No fix listed CWE-89
Priority HIGH 67
Canteen Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via ip/youthappam/php_action/editFile.php.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01241 · Published 2022-11-09 · No fix listed CWE-434
Priority MEDIUM 58
A cross-site scripting (XSS) vulnerability in Canteen Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.01193 · Published 2022-11-08 · No fix listed CWE-79
Priority LOW 35
Canteen Management System Project v1.0 was discovered to contain a SQL injection vulnerability via the component /youthappam/add-food.php.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.0087 · Published 2022-11-07 · No fix listed CWE-89
Priority LOW 35
Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php_action/printOrder.php.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00708 · Published 2022-11-01 · No fix listed CWE-89
Priority LOW 35
Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /editorder.php.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00708 · Published 2022-11-01 · No fix listed CWE-89
Priority LOW 35
Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /print.php.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00708 · Published 2022-11-01 · No fix listed CWE-89
Load more
THREATIST.IORead the docs