Vulnerabilities

TI-2023-18807 CVE-2023-37150 · GHSA-pr83-w226-5h5g

Sourcecodester Online Pizza Ordering System v1.0 has a Cross-site scripting (XSS)…

LOW 28

Sourcecodester Online Pizza Ordering System v1.0 has a Cross-site scripting (XSS) vulnerability in "/admin/index.php?page=categories" Category item.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00628 Published 2023-07-10 No fix listed CWE-79

TI-2023-14131 CVE-2023-30092 · GHSA-4frm-cwqq-w26g

SourceCodester Online Pizza Ordering System v1.0 is vulnerable to SQL Injection via the QTY parameter.

HIGH 76

SourceCodester Online Pizza Ordering System v1.0 is vulnerable to SQL Injection via the QTY parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00978 Published 2023-05-08 No fix listed CWE-89

TI-2023-02106 CVE-2023-2246 · GHSA-742w-xx67-5gpf

SourceCodester Online Pizza Ordering System unrestricted upload

HIGH 75

A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03624 Published 2023-04-23 No fix listed CWE-434

TI-2023-01379 CVE-2023-1460 · GHSA-c3px-mgg3-7j37

SourceCodester Online Pizza Ordering System Password Change improper authentication

MEDIUM 44

A vulnerability was found in SourceCodester Online Pizza Ordering System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00971 Published 2023-03-17 No fix listed CWE-287

TI-2023-01374 CVE-2023-1455 · GHSA-vm76-j474-w5fr

SourceCodester Online Pizza Ordering System Login Page sql injection

LOW 36

A vulnerability classified as critical was found in SourceCodester Online Pizza Ordering System 1.0.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00572 Published 2023-03-17 No fix listed CWE-89

TI-2023-01316 CVE-2023-1392 · GHSA-p536-g6w4-m5h5

SourceCodester Online Pizza Ordering System save_menu unrestricted upload

HIGH 75

A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00886 Published 2023-03-14 No fix listed CWE-434

TI-2023-01290 CVE-2023-1365 · GHSA-jxqg-p2g2-h68r

SourceCodester Online Pizza Ordering System ajax.php sql injection

LOW 34

A vulnerability was found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00753 Published 2023-03-13 No fix listed CWE-89

TI-2023-01289 CVE-2023-1364 · GHSA-w49v-4c53-vqmg

SourceCodester Online Pizza Ordering System GET Parameter category.php sql injection

LOW 34

A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00597 Published 2023-03-13 No fix listed CWE-89

TI-2023-11978 CVE-2023-27212 · GHSA-v7cv-jx64-cxqr

A cross-site scripting (XSS) vulnerability in /php-opos/signup.php of Online Pizza…

LOW 28

A cross-site scripting (XSS) vulnerability in /php-opos/signup.php of Online Pizza Ordering System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the redirect parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00476 Published 2023-03-09 No fix listed CWE-79

TI-2023-11977 CVE-2023-27211 · GHSA-5j47-p75m-mq9v

A cross-site scripting (XSS) vulnerability in /admin/navbar.php of Online Pizza Ordering…

LOW 28

A cross-site scripting (XSS) vulnerability in /admin/navbar.php of Online Pizza Ordering System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the page parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00434 Published 2023-03-09 No fix listed CWE-79

TI-2023-11976 CVE-2023-27210 · GHSA-83wx-2j5f-22vf

Online Pizza Ordering System 1.0 was discovered to contain a SQL injection vulnerability…

MEDIUM 50

Online Pizza Ordering System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/view_order.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00872 Published 2023-03-09 No fix listed CWE-89

TI-2023-11975 CVE-2023-27208 · GHSA-j4ww-g56h-h8c7

A cross-site scripting (XSS) vulnerability in /php-opos/login.php of Online Pizza…

LOW 28

A cross-site scripting (XSS) vulnerability in /php-opos/login.php of Online Pizza Ordering System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the redirect parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00476 Published 2023-03-09 No fix listed CWE-79

TI-2023-11974 CVE-2023-27207 · GHSA-4c9x-rrqj-4c82

Online Pizza Ordering System 1.0 was discovered to contain a SQL injection vulnerability…

MEDIUM 50

Online Pizza Ordering System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/manage_user.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00872 Published 2023-03-09 No fix listed CWE-89

TI-2023-00937 CVE-2023-0988 · GHSA-gmhr-ccqm-6w75

SourceCodester Online Pizza Ordering System cross-site request forgery

HIGH 71

A vulnerability, which was classified as problematic, has been found in SourceCodester Online Pizza Ordering System 1.0.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00465 Published 2023-02-23 No fix listed CWE-352

TI-2023-00936 CVE-2023-0987 · GHSA-rqpg-mqjr-3783

SourceCodester Online Pizza Ordering System cross site scripting

MEDIUM 58

A vulnerability classified as problematic was found in SourceCodester Online Pizza Ordering System 1.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00584 Published 2023-02-23 No fix listed CWE-79

TI-2023-00862 CVE-2023-0910 · GHSA-x73v-7fmv-vgv2

SourceCodester Online Pizza Ordering System GET Parameter view_prod.php sql injection

MEDIUM 43

A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00473 Published 2023-02-18 No fix listed CWE-89

TI-2023-00858 CVE-2023-0906 · GHSA-697r-xqm8-fxrx

SourceCodester Online Pizza Ordering System POST Parameter ajax.php delete_category missing authentication

MEDIUM 43

A vulnerability classified as critical was found in SourceCodester Online Pizza Ordering System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00658 Published 2023-02-18 No fix listed CWE-306

TI-2023-00838 CVE-2023-0883 · GHSA-rvwc-hj36-r9w5

SourceCodester Online Pizza Ordering System index.php sql injection

MEDIUM 43

A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00613 Published 2023-02-17 No fix listed CWE-89

Vulnerabilities

Filters