high7.2
CVE-2023-36968
A SQL Injection vulnerability detected in Food Ordering System v1.0 allows attackers to run commands on the database by sending crafted SQL queries to the ID p…
Impact
A SQL Injection vulnerability detected in Food Ordering System v1.0 allows attackers to run commands on the database by sending crafted SQL queries to the ID parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Food Ordering System Project | Food Ordering System | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/haxxorsid/food-ordering-system
- https://okankurtulus.com.tr/2023/06/21/food-ordering-system-v1-0-authenticated-sql-injection/
- https://github.com/haxxorsid/food-ordering-system
- https://okankurtulus.com.tr/2023/06/21/food-ordering-system-v1-0-authenticated-sql-injection/