Skip to content
OpenAdvisories
Medium · 6.3 CVE-2023-0910 EUVD-2023-12898GHSA-x73v-7fmv-vgv2

SourceCodester Online Pizza Ordering System GET Parameter view_prod.php sql injection

Published Feb 18, 2023 · Updated Aug 2, 2024 · Assigned by VulDB

Description

A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. This vulnerability affects unknown code of the file view_prod.php of the component GET Parameter Handler. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The identifier of this vulnerability is VDB-221476.

Affected products

VendorProductAffectedFixed
SourceCodester Online Pizza Ordering System 1.0 —

References