PT-2023-16158 · Sourcecodester · Sourcecodester Online Food Ordering System

Ssl_Seven_Security Lab_Wangzhiqiang_Xiaozilong · Published 2023-01-15 · Updated 2024-05-17 · CVE-2023-0303

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SourceCodester Online Food Ordering System (affected versions not specified)

Description A critical issue was found in the SourceCodester Online Food Ordering System, affecting some unknown functionality of the file view prod.php. The manipulation of the id argument leads to sql injection. The attack can be launched remotely.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the view prod.php file or disabling the functionality that uses the id argument to minimize the risk of exploitation.

Exploit

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2023-0303

Affected Products

Sourcecodester Online Food Ordering System

References · 6

• 🔥❌ https://github.com/Hanfu-l/cvetest/blob/main/1.pdf · Exploit, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2023-0303 · Security Note
• https://t.me/cvenotify/42050 · Telegram Post
• https://vuldb.com/?id.218384 · Note
• https://vuldb.com/?ctiid.218384 · Note
• https://t.me/cibsecurity/56514 · Telegram Post