PT-2023-29502 · Unknown · Online Food Ordering System

Publicado 2023-11-02 · Atualizado 2024-01-02 · CVE-2023-45327

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Online Food Ordering System version 1.0

Description The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. The name parameter of the "routers/add-users.php" resource does not validate the input, making it vulnerable to SQL injection attacks.

Recommendations For Online Food Ordering System version 1.0, consider validating and sanitizing the name parameter in the "routers/add-users.php" resource to prevent SQL injection attacks. As a temporary workaround, restrict access to the "routers/add-users.php" resource until a proper fix is implemented.

Exploit

Identificadores relacionados

CVE-2023-45327

Produtos afetados

Online Food Ordering System

Referências · 5

• 🔥 https://fluidattacks.com/advisories/hann · Exploit
• https://twitter.com/VulmonFeeds/status/1720129898306580934 · Publicação no Twitter
• https://twitter.com/cracbot/status/1720381897895715025 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2023-45327 · Nota de Segurança
• https://twitter.com/CVEnew/status/1720068037150417047 · Publicação no Twitter