Skip to content
OpenAdvisories

Product · SourceCodester

Simple Online Food Ordering System

13 known vulnerabilities.

11 results · Clear filters · Feed

  • High 7.3

    SourceCodester Simple Online Food Ordering System ajax.php login2 sql injection

    A vulnerability has been found in SourceCodester Simple Online Food Ordering System 1.0. This affects an unknown function of the file /admin/ajax.php?action=login2. The manipulation of the argument email leads to sql injection. It is possible to initiate the …

  • High 7.3

    SourceCodester Simple Online Food Ordering System ajax.php save_settings sql injection

    A vulnerability was determined in SourceCodester Simple Online Food Ordering System 1.0. Impacted is an unknown function of the file /fos/admin/ajax.php?action=save_settings. This manipulation of the argument Name causes sql injection. The attack is possible …

  • High 7.3

    SourceCodester Simple Online Food Ordering System ajax.php confirm_order sql injection

    A vulnerability was found in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /fos/admin/ajax.php?action=confirm_order. The manipulation of the argument ID results in sql injection. The attack can b…

  • High 7.3

    SourceCodester Simple Online Food Ordering System view_prod.php sql injection

    A vulnerability was detected in SourceCodester Simple Online Food Ordering System 1.0. Impacted is an unknown function of the file /fos/view_prod.php. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is …

  • High 7.3

    SourceCodester Simple Online Food Ordering System ajax.php add_to_cart sql injection

    A security vulnerability has been detected in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /fos/admin/ajax.php?action=add_to_cart. Such manipulation of the argument pid leads to sql injection. T…

  • High 7.3

    SourceCodester Simple Online Food Ordering System ajax.php save_user sql injection

    A weakness has been identified in SourceCodester Simple Online Food Ordering System 1.0. This vulnerability affects unknown code of the file /fos/admin/ajax.php?action=save_user. This manipulation of the argument Username causes sql injection. The attack may …

  • High 7.3

    SourceCodester Simple Online Food Ordering System ajax.php delete_category sql injection

    A security vulnerability has been detected in SourceCodester Simple Online Food Ordering System 1.0. The impacted element is an unknown function of the file /admin/ajax.php?action=delete_category. Such manipulation of the argument ID leads to sql injection. I…

  • High 7.3

    SourceCodester Simple Online Food Ordering System view_order.php sql injection

    A security flaw has been discovered in SourceCodester Simple Online Food Ordering System 1.0. Impacted is an unknown function of the file /fos/admin/view_order.php. The manipulation of the argument ID results in sql injection. The attack may be performed from…

  • High 7.3

    SourceCodester Simple Online Food Ordering System ajax.php delete_menu sql injection

    A vulnerability was found in SourceCodester Simple Online Food Ordering System 1.0. This impacts an unknown function of the file /admin/ajax.php?action=delete_menu. The manipulation of the argument ID results in sql injection. It is possible to launch the att…

  • High 7.3

    SourceCodester Simple Online Food Ordering System ajax.php save_menu sql injection

    A vulnerability has been found in SourceCodester Simple Online Food Ordering System 1.0. This affects an unknown function of the file /admin/ajax.php?action=save_menu. The manipulation of the argument ID leads to sql injection. It is possible to initiate the …

  • High 7.3

    SourceCodester Simple Online Food Ordering System ajax.php login sql injection

    A flaw has been found in SourceCodester Simple Online Food Ordering System 1.0. The impacted element is an unknown function of the file /admin/ajax.php?action=login. Executing a manipulation of the argument Username can lead to sql injection. The attack may b…