Skip to content
OpenAdvisories

Archive

2 November 2023

Vulnerabilities first published on this day (UTC), newest first.

← October 2023 2023 / November /2 December 2023 →
  1. 1144
  2. 296
  3. 3108
  4. 48
  5. 57
  6. 6118
  7. 7163
  8. 8111
  9. 9100
  10. 1039
  11. 115
  12. 1236
  13. 1382
  14. 14339
  15. 1575
  16. 16131
  17. 1773
  18. 1844
  19. 191
  20. 2075
  21. 2162
  22. 22168
  23. 2350
  24. 2417
  25. 25 
  26. 269
  27. 2795
  28. 2872
  29. 2957
  30. 30205
All Critical High Medium Low Exploited only Public exploit

21 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-45347

    Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

    Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The '*_verified' parameter of the routers/user-router.php resource does not validate the characters received and they are sent unfiltered to the database.

    Projectworlds Pvt Online Food Ordering System
  • Critical 9.8
    CVE-2023-45346

    Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

    Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The '*_role' parameter of the routers/user-router.php resource does not validate the characters received and they are sent unfiltered to the database.

    Projectworlds Pvt Online Food Ordering System
  • Critical 9.8
    CVE-2023-45345

    Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

    Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The '*_deleted' parameter of the routers/user-router.php resource does not validate the characters received and they are sent unfiltered to the database.

    Projectworlds Pvt Online Food Ordering System
  • Critical 9.8
    CVE-2023-45338

    Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

    Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter of the routers/add-ticket.php resource does not validate the characters received and they are sent unfiltered to the database.

    Projectworlds Pvt Online Food Ordering System
  • Critical 9.8
    CVE-2023-45343

    Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

    Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'ticket_id' parameter of the routers/ticket-message.php resource does not validate the characters received and they are sent unfiltered to the databa…

    Projectworlds Pvt Online Food Ordering System
  • Critical 9.8
    CVE-2023-45341

    Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

    Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The '*_price' parameter of the routers/menu-router.php resource does not validate the characters received and they are sent unfiltered to the database.

    Projectworlds Pvt Online Food Ordering System
  • Critical 9.8
    CVE-2023-45344

    Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

    Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The '*_balance' parameter of the routers/user-router.php resource does not validate the characters received and they are sent unfiltered to the database.

    Projectworlds Pvt Online Food Ordering System
  • Critical 9.8
    CVE-2023-45342

    Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

    Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'phone' parameter of the routers/register-router.php resource does not validate the characters received and they are sent unfiltered to the database.

    Projectworlds Pvt Online Food Ordering System
  • Critical 9.8
    CVE-2023-45340

    Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

    Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'phone' parameter of the routers/details-router.php resource does not validate the characters received and they are sent unfiltered to the database.

    Projectworlds Pvt Online Food Ordering System
  • Critical 10.0
    CVE-2023-42802

    GLPI vulnerable to unallowed PHP script execution

    GLPI is a free asset and IT management software package. Starting in version 10.0.7 and prior to version 10.0.10, an unverified object instantiation allows one to upload malicious PHP files to unwanted directories. Depending on web server configuration and av…

    GLPI glpi glpi Ubuntu
  • Critical 9.8
    CVE-2023-45336

    Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

    Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'password' parameter of the routers/router.php resource does not validate the characters received and they are sent unfiltered to the database.

    Projectworlds Pvt Online Food Ordering System
  • Critical 9.8
    CVE-2023-45334

    Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

    Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'status' parameter of the routers/edit-orders.php resource does not validate the characters received and they are sent unfiltered to the database.

    Projectworlds Pvt Online Food Ordering System
  • Critical 9.8
    CVE-2023-45325

    Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

    Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'address' parameter of the routers/add-users.php resource does not validate the characters received and they are sent unfiltered to the database.

    Projectworlds Pvt Online Food Ordering System
  • Critical 9.8
    CVE-2023-45323

    Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

    Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'name' parameter of the routers/add-item.php resource does not validate the characters received and they are sent unfiltered to the database.

    Projectworlds Pvt Online Food Ordering System
  • Critical 9.8
    CVE-2023-45019

    Online Bus Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

    Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'category' parameter of the category.php resource does not validate the characters received and they are sent unfiltered to the database.

    Projectworlds Pvt Online Bus Booking System
  • Critical 9.8
    CVE-2023-45018

    Online Bus Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

    Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the includes/login.php resource does not validate the characters received and they are sent unfiltered to the database.

    Projectworlds Pvt Online Bus Booking System
  • Critical 9.8
    CVE-2023-45015

    Online Bus Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

    Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'date' parameter of the bus_info.php resource does not validate the characters received and they are sent unfiltered to the database.

    Projectworlds Pvt Online Bus Booking System
  • Critical 9.8
    CVE-2023-45012

    Online Bus Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

    Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'user_email' parameter of the bus_info.php resource does not validate the characters received and they are sent unfiltered to the database.

    Projectworlds Pvt Online Bus Booking System
  • Critical 9.8
    CVE-2023-45111

    Online Examination System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

    Online Examination System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'email' parameter of the feed.php resource does not validate the characters received and they are sent unfiltered to the database.

    Projectworlds Pvt Online Examination System
  • Critical 9.8
    CVE-2023-46958

    An issue in lmxcms v.1.41 allows a remote attacker to execute arbitrary code via a crafted script to the admin.php file.

  • Critical 9.8
    CVE-2023-47204

    transmute-core unsafe YAML deserialization vulnerability

    Unsafe YAML deserialization in yaml.Loader in transmute-core before 1.13.5 allows attackers to execute arbitrary Python code.

    transmute-core PyPI