Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2855▼ 333 respecto a la semana anterior
Críticas / altas1381▼ 36 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)296▼ 213 respecto a la semana anterior
15 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (6.1) | 0.50% | — | Fast Food Ordering System Project Fast Food Ordering System | 1/11/2022 | 17/6/2026 | A cross-site scripting (XSS) vulnerability in /fastfood/purchase.php of Fast Food Ordering System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the customer parameter. | |
| Modificada | Alta (7.5) | 0.79% | — | Fast Food Ordering System Project Fast Food Ordering System | 1/11/2022 | 17/6/2026 | Fast Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the component /fastfood/purchase.php. | |
| Modificada | Media (6.1) | 0.40% | — | Fast Food Ordering System Project Fast Food Ordering System | 27/8/2022 | 17/6/2026 | A vulnerability, which was classified as problematic, has been found in oretnom23 Fast Food Ordering System. This issue affects some unknown processing of the file admin/?page=reports. The manipulation of the argument date leads to cross site scripting. The attack may be initiated remotely. The identifier VDB-207425… | |
| Modificada | Alta (8.8) | 0.74% | — | Fast Food Ordering System Project Fast Food Ordering System | 27/8/2022 | 17/6/2026 | A vulnerability was found in oretnom23 Fast Food Ordering System. It has been rated as critical. Affected by this issue is some unknown functionality of the file ffos/admin/reports/index.php. The manipulation of the argument date leads to sql injection. The attack may be launched remotely. The exploit has been… | |
| Modificada | Media (5.4) | 0.54% | — | Fast Food Ordering System Project Fast Food Ordering System | 6/8/2022 | 17/6/2026 | A vulnerability, which was classified as problematic, was found in oretnom23 Fast Food Ordering System. This affects an unknown part of the component Menu List Page. The manipulation of the argument Description leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been… | |
| Modificada | Media (5.4) | 0.53% | — | Fast Food Ordering System Project Fast Food Ordering System | 14/7/2022 | 17/6/2026 | Fast Food Ordering System v1.0 was discovered to contain a persistent cross-site scripting (XSS) vulnerability via the component /ffos/classes/Master.php?f=save_category. | |
| Modificada | Alta (7.2) | 0.96% | — | Fast Food Ordering System Project Fast Food Ordering System | 14/6/2022 | 17/6/2026 | Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/menus/manage_menu.php?id=. | |
| Modificada | Alta (7.2) | 0.96% | — | Fast Food Ordering System Project Fast Food Ordering System | 14/6/2022 | 17/6/2026 | Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/categories/manage_category.php?id=. | |
| Modificada | Alta (7.2) | 0.96% | — | Fast Food Ordering System Project Fast Food Ordering System | 14/6/2022 | 17/6/2026 | Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/sales/receipt.php?id=. | |
| Modificada | Alta (7.2) | 0.96% | — | Fast Food Ordering System Project Fast Food Ordering System | 14/6/2022 | 17/6/2026 | Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/classes/Master.php?f=delete_category. | |
| Modificada | Alta (7.2) | 0.96% | — | Fast Food Ordering System Project Fast Food Ordering System | 14/6/2022 | 17/6/2026 | Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/categories/view_category.php?id=. | |
| Modificada | Alta (7.2) | 0.96% | — | Fast Food Ordering System Project Fast Food Ordering System | 14/6/2022 | 17/6/2026 | Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/classes/Master.php?f=delete_menu. | |
| Modificada | Crítica (9.1) | 1.2% | — | Fast Food Ordering System Project Fast Food Ordering System | 14/6/2022 | 17/6/2026 | Fast Food Ordering System v1.0 is vulnerable to Delete any file. via /ffos/classes/Master.php?f=delete_img. | |
| Modificada | Crítica (9.8) | 1.1% | — | Fast Food Ordering System Project Fast Food Ordering System | 14/6/2022 | 17/6/2026 | Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/menus/view_menu.php?id=. | |
| Modificada | Media (4.8) | 0.60% | — | Fast Food Ordering System Project Fast Food Ordering System | 7/6/2022 | 17/6/2026 | A vulnerability classified as problematic has been found in Fast Food Ordering System 1.0. Affected is the file Master.php of the Master List. The manipulation of the argument Description with the input foo "><img src="" onerror="alert(document.cookie)"> leads to cross site scripting. It is possible to launch the… |