PT-2023-29510 · Unknown · Online Food Ordering System

Published 2023-11-02 · Updated 2024-01-02 · CVE-2023-45335

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Online Food Ordering System version 1.0

Description The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. The id parameter of the "routers/edit-orders.php" resource does not validate the input, making it vulnerable to SQL injection attacks.

Recommendations For Online Food Ordering System version 1.0, consider validating and sanitizing the id parameter in the "routers/edit-orders.php" resource to prevent SQL injection attacks. As a temporary workaround, restrict access to the "routers/edit-orders.php" resource until a patch is available.

Exploit

Related Identifiers

CVE-2023-45335

Affected Products

Online Food Ordering System

References · 5

• 🔥 https://fluidattacks.com/advisories/hann · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-45335 · Security Note
• https://twitter.com/VulmonFeeds/status/1720122743738253370 · Twitter Post
• https://twitter.com/cracbot/status/1720381918485570033 · Twitter Post
• https://twitter.com/CVEnew/status/1720072770686779715 · Twitter Post