PT-2023-29502 · Unknown · Online Food Ordering System

Published 2023-11-02 · Updated 2024-01-02 · CVE-2023-45327

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Online Food Ordering System version 1.0

Description The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. The name parameter of the "routers/add-users.php" resource does not validate the input, making it vulnerable to SQL injection attacks.

Recommendations For Online Food Ordering System version 1.0, consider validating and sanitizing the name parameter in the "routers/add-users.php" resource to prevent SQL injection attacks. As a temporary workaround, restrict access to the "routers/add-users.php" resource until a proper fix is implemented.

Exploit

Related Identifiers

CVE-2023-45327

Affected Products

Online Food Ordering System

References · 5

• 🔥 https://fluidattacks.com/advisories/hann · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-45327 · Security Note
• https://twitter.com/VulmonFeeds/status/1720129898306580934 · Twitter Post
• https://twitter.com/cracbot/status/1720381897895715025 · Twitter Post
• https://twitter.com/CVEnew/status/1720068037150417047 · Twitter Post