PT-2023-29499 · Unknown · Online Food Ordering System

Publicado 2023-11-02 · Atualizado 2024-01-02 · CVE-2023-45324

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Online Food Ordering System version 1.0

Description The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. The price parameter of the "routers/add-item.php" resource is vulnerable. This could potentially allow unauthorized access to sensitive data.

Recommendations For Online Food Ordering System version 1.0, consider restricting access to the "routers/add-item.php" resource until a patch is available. As a temporary workaround, avoid using the price parameter in the affected resource to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2023-45324

Produtos afetados

Online Food Ordering System

Referências · 5

• 🔥 https://fluidattacks.com/advisories/hann · Exploit
• https://twitter.com/CVEnew/status/1720068042141659496 · Publicação no Twitter
• https://twitter.com/cracbot/status/1720381890031480973 · Publicação no Twitter
• https://twitter.com/VulmonFeeds/status/1720137994743566467 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2023-45324 · Nota de Segurança