Projectworlds Online Food Ordering Script vulnerabilities
4 vulnerabilities
Known vulnerabilities in Projectworlds Online Food Ordering Script, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2023-45346projectworlds pvt. limitedonline food ordering system+1
EPSS score0.70%
Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The '*_role' parameter of the routers/user-router.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-45345projectworlds pvt. limitedonline food ordering system+1EPSS score0.70%
Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The '*_deleted' parameter of the routers/user-router.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-45347projectworlds pvt. limitedonline food ordering system+1EPSS score0.70%
Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The '*_verified' parameter of the routers/user-router.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-45338projectworlds pvt. limitedonline food ordering system+1EPSS score0.70%
Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter of the routers/add-ticket.php resource does not validate the characters received and they are sent unfiltered to the database.