Oretnom23 Online Food Ordering System vulnerabilities, page 2
29 vulnerabilities
Known vulnerabilities in Oretnom23 Online Food Ordering System, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2023-27073oretnom23online_food_ordering_system
EPSS score0.26%
A Cross-Site Request Forgery (CSRF) in Online Food Ordering System v1.0 allows attackers to change user details and credentials via a crafted POST request.CVE-2023-24646oretnom23online_food_ordering_systemEPSS score1.07%
An arbitrary file upload vulnerability in the component /fos/admin/ajax.php of Food Ordering System v2.0 allows attackers to execute arbitrary code via a crafted PHP file.CVE-2023-24191oretnom23online_food_ordering_systemEPSS score0.49%
Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the redirect parameter in signup.php.CVE-2023-24197oretnom23online_food_ordering_systemEPSS score0.46%
Online Food Ordering System v2 was discovered to contain a SQL injection vulnerability via the id parameter at view_order.php.CVE-2023-24192oretnom23online_food_ordering_systemEPSS score0.49%
Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the redirect parameter in login.php.CVE-2023-24194oretnom23online_food_ordering_systemEPSS score0.49%
Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the page parameter in navbar.php.CVE-2023-24647oretnom23online_food_ordering_systemEPSS score0.74%
Food Ordering System v2.0 was discovered to contain a SQL injection vulnerability via the email parameter.CVE-2023-24195oretnom23online_food_ordering_systemEPSS score0.49%
Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the page parameter in index.php.CVE-2023-30122oretnom23online_food_ordering_systemEPSS score0.98%
An arbitrary file upload vulnerability in the component /admin/ajax.php?action=save_menu of Online Food Ordering System v2.0 allows attackers to execute arbitrary code via uploading a crafted PHP file.