Vulnerabilities

TI-2022-12347 CVE-2022-30015 · GHSA-j3rw-hc28-wcqc

In Simple Food Website 1.0, a moderation can put the Cross Site Scripting Payload in any…

LOW 25

In Simple Food Website 1.0, a moderation can put the Cross Site Scripting Payload in any of the fields on http://127.0.0.1:1234/food/admin/all_users.php like Full Username, etc .This causes stored xss.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00544 Published 2022-05-23 No fix listed CWE-79

TI-2022-12346 CVE-2022-30014 · GHSA-p6p3-chv5-mwrq

Lumidek Associates Simple Food Website 1.0 is vulnerable to Cross Site Request Forgery…

LOW 39

Lumidek Associates Simple Food Website 1.0 is vulnerable to Cross Site Request Forgery (CSRF) which allows anyone to takeover admin/moderater account.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00556 Published 2022-05-23 No fix listed CWE-352

TI-2021-13295 CVE-2021-34166 · GHSA-77jq-5g23-3v2j

A SQL INJECTION vulnerability in Sourcecodester Simple Food Website 1.0 allows a remote…

MEDIUM 47

A SQL INJECTION vulnerability in Sourcecodester Simple Food Website 1.0 allows a remote attacker to Bypass Authentication and become Admin.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02916 Published 2021-07-28 No fix listed CWE-89

Vulnerabilities

Filters

In Simple Food Website 1.0, a moderation can put the Cross Site Scripting Payload in any…

Lumidek Associates Simple Food Website 1.0 is vulnerable to Cross Site Request Forgery…

A SQL INJECTION vulnerability in Sourcecodester Simple Food Website 1.0 allows a remote…