Projectworlds Pvt. Limited Online Food Ordering System vulnerabilities
13 vulnerabilities
Known vulnerabilities in Projectworlds Pvt. Limited Online Food Ordering System, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2023-45346projectworlds pvt. limitedonline food ordering system+1
EPSS score0.70%
Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The '*_role' parameter of the routers/user-router.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-45325projectworlds pvt. limitedonline food ordering system+1EPSS score0.70%
Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'address' parameter of the routers/add-users.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-45345projectworlds pvt. limitedonline food ordering system+1EPSS score0.70%
Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The '*_deleted' parameter of the routers/user-router.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-45344projectworlds pvt. limitedonline food ordering system+1EPSS score0.70%
Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The '*_balance' parameter of the routers/user-router.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-45336projectworlds pvt. limitedonline food ordering system+1EPSS score0.70%
Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'password' parameter of the routers/router.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-45343projectworlds pvt. limitedonline food ordering system+1EPSS score0.70%
Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'ticket_id' parameter of the routers/ticket-message.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-45341projectworlds pvt. limitedonline food ordering system+1EPSS score0.70%
Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The '*_price' parameter of the routers/menu-router.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-45340projectworlds pvt. limitedonline food ordering system+1EPSS score0.70%
Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'phone' parameter of the routers/details-router.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-45323projectworlds pvt. limitedonline food ordering system+1EPSS score0.70%
Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'name' parameter of the routers/add-item.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-45342projectworlds pvt. limitedonline food ordering system+1EPSS score0.70%
Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'phone' parameter of the routers/register-router.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-45347projectworlds pvt. limitedonline food ordering system+1EPSS score0.70%
Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The '*_verified' parameter of the routers/user-router.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-45334projectworlds pvt. limitedonline food ordering system+1EPSS score0.70%
Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'status' parameter of the routers/edit-orders.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-45338projectworlds pvt. limitedonline food ordering system+1EPSS score0.70%
Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter of the routers/add-ticket.php resource does not validate the characters received and they are sent unfiltered to the database.