Vulnerabilidades do Oretnom23 Online Food Ordering System
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Oretnom23 Online Food Ordering System: 7 registro(s), com versões afetadas e correções.cpe:2.3:a:oretnom23:online_food_ordering_system
CVE-2026-30534
Alta · 8.3
CWE-89 27/03/2026
SQL Injection em Oretnom23 Online Food Ordering System
A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in admin/manage_category.php via the "id" parameter.
CVE-2026-30533
Crítica · 9.8
CWE-89 27/03/2026
SQL Injection em Oretnom23 Online Food Ordering System
A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the admin/manage_product.php file via the "id" parameter.
CVE-2026-30532
Crítica · 9.8
CWE-89 27/03/2026
SQL Injection em Oretnom23 Online Food Ordering System
A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the admin/view_product.php file via the "id" parameter.
CVE-2026-30531
Alta · 8.8
CWE-89 27/03/2026
SQL Injection em Oretnom23 Online Food Ordering System
A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Actions.php file (specifically the save_category action). The application fails to properly sanitize user input supplied to the "name" parameter. This allows an authenticated attacker to inject malicious SQL commands.
CVE-2026-30530
Crítica · 9.8
CWE-89 27/03/2026
SQL Injection em Oretnom23 Online Food Ordering System
A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Actions.php file (specifically the save_customer action). The application fails to properly sanitize user input supplied to the "username" parameter. This allows an attacker to inject malicious SQL commands.
CVE-2026-30529
Alta · 8.8
CWE-89 27/03/2026
SQL Injection em Oretnom23 Online Food Ordering System
A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Actions.php file (specifically the save_user action). The application fails to properly sanitize user input supplied to the "username" parameter. This allows an authenticated attacker to inject malicious SQL commands.
CVE-2026-30527
Média · 5.4
CWE-79 27/03/2026
Cross-site Scripting (XSS) em Oretnom23 Online Food Ordering System
A Stored Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Category management module within the admin panel. The application fails to properly sanitize user input supplied to the "Category Name" field when creating or updating a category. When an administrator or user visits the Category list page (or any page where this category is rendered), the injected JavaScript executes immediately in their browser.