Unscored CVE-2023-36968 EUVD-2023-40888GHSA-j6rf-pfmw-h88q

A SQL Injection vulnerability detected in Food Ordering System v1.0 allows attackers to run commands on the database by sending crafted SQL…

Published Jul 6, 2023 · Updated Nov 19, 2024 · Assigned by mitre

Description

A SQL Injection vulnerability detected in Food Ordering System v1.0 allows attackers to run commands on the database by sending crafted SQL queries to the ID parameter.

References

https://github.com/haxxorsid/food-ordering-system
https://okankurtulus.com.tr/2023/06/21/food-ordering-system-v1-0-authenticated-sql-injection/