Priority HIGH 69
A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in admin/manage_category.php via the "id" parameter.
CVSS 3.1HIGH 8.3· Network · Low privileges · No interaction · EPSS 0.00341 · Published 2026-03-27 · No fix listed CWE-89
Priority HIGH 82
A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the admin/manage_product.php file via the "id" parameter.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0041 · Published 2026-03-27 · No fix listed CWE-89
Priority HIGH 82
A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the admin/view_product.php file via the "id" parameter.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00343 · Published 2026-03-27 · No fix listed CWE-89
Priority HIGH 73
A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Actions.php file (specifically the save_category action).
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00462 · Published 2026-03-27 · No fix listed CWE-89
Priority HIGH 82
A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Actions.php file (specifically the save_customer action).
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00495 · Published 2026-03-27 · No fix listed CWE-89
Priority HIGH 73
A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Actions.php file (specifically the save_user action).
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00463 · Published 2026-03-27 · No fix listed CWE-89
Priority MEDIUM 58
A Stored Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Category management module within the admin panel.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00238 · Published 2026-03-27 · No fix listed CWE-79
Priority HIGH 70
A vulnerability was found in SourceCodester Online Food Ordering System 2.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00544 · Published 2025-03-17 · No fix listed CWE-74
Priority LOW 31
A vulnerability classified as problematic has been found in SourceCodester Online Food Ordering System 2.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00579 · Published 2024-09-09 · No fix listed CWE-79
Priority HIGH 81
A vulnerability classified as critical was found in CodeAstro Online Food Ordering System 1.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00779 · Published 2024-01-05 · No fix listed CWE-89
Priority MEDIUM 51
An arbitrary file upload vulnerability in the component /admin/ajax.php?action=save_menu of Online Food Ordering System v2.0 allows attackers to execute arbitrary code via uploading a crafted PHP file.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00983 · Published 2023-05-05 · No fix listed CWE-434
Priority MEDIUM 43
A vulnerability was found in SourceCodester Online Food Ordering System 2.0 and classified as critical.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00591 · Published 2023-03-16 · No fix listed CWE-284
Priority MEDIUM 62
A Cross-Site Request Forgery (CSRF) in Online Food Ordering System v1.0 allows attackers to change user details and credentials via a crafted POST request.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00262 · Published 2023-03-14 · No fix listed CWE-352
Priority HIGH 72
Food Ordering System v2.0 was discovered to contain a SQL injection vulnerability via the email parameter.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00736 · Published 2023-02-13 · No fix listed CWE-89
Priority HIGH 82
An arbitrary file upload vulnerability in the component /fos/admin/ajax.php of Food Ordering System v2.0 allows attackers to execute arbitrary code via a crafted PHP file.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01071 · Published 2023-02-13 · No fix listed CWE-434
Priority LOW 28
Online Food Ordering System v2 was discovered to contain a SQL injection vulnerability via the id parameter at view_order.php.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00461 · Published 2023-02-06 · No fix listed CWE-79
Priority LOW 28
Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the page parameter in index.php.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00486 · Published 2023-02-06 · No fix listed CWE-79
Priority LOW 28
Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the page parameter in navbar.php.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00486 · Published 2023-02-06 · No fix listed CWE-79
Priority LOW 28
Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the redirect parameter in login.php.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00486 · Published 2023-02-06 · No fix listed CWE-79
Priority HIGH 68
Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the redirect parameter in signup.php.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00486 · Published 2023-02-06 · No fix listed CWE-79
Priority HIGH 82
Multiple SQL Injection vulnerabilities in tourist5 Online-food-ordering-system 1.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00843 · Published 2023-01-20 · No fix listed CWE-89
Priority MEDIUM 44
A vulnerability was found in SourceCodester Online Food Ordering System 2.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00941 · Published 2023-01-17 · No fix listed CWE-89
Priority LOW 27
A vulnerability was found in SourceCodester Online Food Ordering System 2.0.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00373 · Published 2023-01-12 · No fix listed CWE-79
Priority MEDIUM 43
A vulnerability was found in SourceCodester Online Food Ordering System 2.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00562 · Published 2023-01-12 · No fix listed CWE-434
Priority MEDIUM 43
A vulnerability was found in SourceCodester Online Food Ordering System 2.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00515 · Published 2023-01-12 · No fix listed CWE-89
Load more
THREATIST.IORead the docs