Skip to content
OpenAdvisories

Product · SourceCodester

Online Pizza Ordering System

12 known vulnerabilities.

9 results · Clear filters · Feed

  • Medium 4.7

    SourceCodester Online Pizza Ordering System sql injection

    A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/ajax.php?action=confirm_order. The manipulation of the argument id leads to sql injection.…

  • Medium 6.3
    CVE-2023-2246 Public exploit

    SourceCodester Online Pizza Ordering System unrestricted upload

    A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. This vulnerability affects unknown code of the file admin/ajax.php?action=save_settings. The manipulation of the argument img leads to unrestricted u…

  • Medium 6.5

    SourceCodester Online Pizza Ordering System Password Change improper authentication

    A vulnerability was found in SourceCodester Online Pizza Ordering System 1.0. It has been classified as critical. This affects an unknown part of the file admin/ajax.php?action=save_user of the component Password Change Handler. The manipulation leads to impr…

  • Medium 5.6

    SourceCodester Online Pizza Ordering System Login Page sql injection

    A vulnerability classified as critical was found in SourceCodester Online Pizza Ordering System 1.0. This vulnerability affects unknown code of the file admin/ajax.php?action=login2 of the component Login Page. The manipulation of the argument email with the …

  • Medium 6.3

    SourceCodester Online Pizza Ordering System save_menu unrestricted upload

    A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. Affected by this vulnerability is the function save_menu. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exp…

  • Medium 6.3

    SourceCodester Online Pizza Ordering System GET Parameter category.php sql injection

    A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file category.php of the component GET Parameter Handler. The manipulation of the a…

  • Medium 4.3

    SourceCodester Online Pizza Ordering System cross-site request forgery

    A vulnerability, which was classified as problematic, has been found in SourceCodester Online Pizza Ordering System 1.0. This issue affects some unknown processing of the file admin/ajax.php?action=save_user. The manipulation leads to cross-site request forge…

  • Medium 6.3

    SourceCodester Online Pizza Ordering System GET Parameter view_prod.php sql injection

    A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. This vulnerability affects unknown code of the file view_prod.php of the component GET Parameter Handler. The manipulation of the argument ID leads t…

  • Medium 6.3

    SourceCodester Online Pizza Ordering System index.php sql injection

    A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. This vulnerability affects unknown code of the file /php-opos/index.php. The manipulation of the argument ID leads to sql injection. The attack can b…