Oretnom23
Oretnom23 Online Food Ordering System: vulnerabilidades y CVE
Oretnom23 Online Food Ordering System tiene 29 vulnerabilidades publicadas, 7 de ellas en los últimos 12 meses. 14 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE29
Últimos 12 meses7
Críticas14
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-30534 | Alta (8.3) | 0.39% | — | 27 mar 2026 | A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in admin/manage_category.php via the "id" parameter. |
| CVE-2026-30533 | Crítica (9.8) | 0.50% | — | 27 mar 2026 | A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the admin/manage_product.php file via the "id" parameter. |
| CVE-2026-30532 | Crítica (9.8) | 0.50% | — | 27 mar 2026 | A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the admin/view_product.php file via the "id" parameter. |
| CVE-2026-30531 | Alta (8.8) | 0.46% | — | 27 mar 2026 | A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Actions.php file (specifically the save_category action). The application fails to properly sanitize user input supplied to… |
| CVE-2026-30530 | Crítica (9.8) | 0.50% | — | 27 mar 2026 | A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Actions.php file (specifically the save_customer action). The application fails to properly sanitize user input supplied to… |
| CVE-2026-30529 | Alta (8.8) | 0.46% | — | 27 mar 2026 | A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Actions.php file (specifically the save_user action). The application fails to properly sanitize user input supplied to the… |
| CVE-2026-30527 | Media (5.4) | 0.24% | — | 27 mar 2026 | A Stored Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Category management module within the admin panel. The application fails to properly sanitize user input… |
| CVE-2025-2387 | Media (6.9) | 0.53% | — | 17 mar 2025 | A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been classified as critical. Affected is an unknown function of the file /admin/ajax.php?action=add_to_cart. The manipulation of the… |
| CVE-2024-8604 | Media (6.9) | 0.58% | — | 9 sept 2024 | A vulnerability classified as problematic has been found in SourceCodester Online Food Ordering System 2.0. This affects an unknown part of the file index.php of the component Create an Account Page. The manipulation of… |
| CVE-2024-0247 | Crítica (9.8) | 0.78% | — | 5 ene 2024 | A vulnerability classified as critical was found in CodeAstro Online Food Ordering System 1.0. This vulnerability affects unknown code of the file /admin/ of the component Admin Panel. The manipulation of the argument… |
| CVE-2023-30122 | Crítica (9.8) | 0.98% | — | 5 may 2023 | An arbitrary file upload vulnerability in the component /admin/ajax.php?action=save_menu of Online Food Ordering System v2.0 allows attackers to execute arbitrary code via uploading a crafted PHP file. |
| CVE-2023-1432 | Crítica (9.8) | 0.59% | — | 16 mar 2023 | A vulnerability was found in SourceCodester Online Food Ordering System 2.0 and classified as critical. Affected by this issue is some unknown functionality of the file /fos/admin/ajax.php?action=save_settings of the… |
| CVE-2023-27073 | Media (6.5) | 0.26% | — | 14 mar 2023 | A Cross-Site Request Forgery (CSRF) in Online Food Ordering System v1.0 allows attackers to change user details and credentials via a crafted POST request. |
| CVE-2023-24647 | Alta (7.5) | 0.74% | — | 13 feb 2023 | Food Ordering System v2.0 was discovered to contain a SQL injection vulnerability via the email parameter. |
| CVE-2023-24646 | Crítica (9.8) | 1.1% | — | 13 feb 2023 | An arbitrary file upload vulnerability in the component /fos/admin/ajax.php of Food Ordering System v2.0 allows attackers to execute arbitrary code via a crafted PHP file. |
| CVE-2023-24197 | Media (6.1) | 0.46% | — | 6 feb 2023 | Online Food Ordering System v2 was discovered to contain a SQL injection vulnerability via the id parameter at view_order.php. |
| CVE-2023-24195 | Media (6.1) | 0.49% | — | 6 feb 2023 | Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the page parameter in index.php. |
| CVE-2023-24194 | Media (6.1) | 0.49% | — | 6 feb 2023 | Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the page parameter in navbar.php. |
| CVE-2023-24192 | Media (6.1) | 0.49% | — | 6 feb 2023 | Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the redirect parameter in login.php. |
| CVE-2023-24191 | Media (6.1) | 0.49% | — | 6 feb 2023 | Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the redirect parameter in signup.php. |
| CVE-2020-29297 | Crítica (9.8) | 0.82% | — | 20 ene 2023 | Multiple SQL Injection vulnerabilities in tourist5 Online-food-ordering-system 1.0. |
| CVE-2023-0332 | Crítica (9.8) | 0.92% | — | 17 ene 2023 | A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been classified as critical. Affected is an unknown function of the file admin/manage_user.php. The manipulation of the argument id… |
| CVE-2023-0258 | Media (6.1) | 0.36% | — | 12 ene 2023 | A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Category List Handler. The… |
| CVE-2023-0257 | Crítica (9.8) | 0.54% | — | 12 ene 2023 | A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /fos/admin/index.php?page=menu of the… |
| CVE-2023-0256 | Crítica (9.8) | 0.49% | — | 12 ene 2023 | A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been classified as critical. Affected is an unknown function of the file /fos/admin/ajax.php?action=login of the component Login Page.… |
| CVE-2022-36759 | Crítica (9.8) | 1.1% | — | 2 sept 2022 | Online Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the component /dishes.php?res_id=. |
| CVE-2022-29651 | Alta (7.2) | 1.5% | — | 25 may 2022 | An arbitrary file upload vulnerability in the Select Image function of Online Food Ordering System v1.0 allows attackers to execute arbitrary code via a crafted PHP file. |
| CVE-2022-29650 | Crítica (9.8) | 1.3% | — | 25 may 2022 | Online Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the Search parameter at /online-food-order/food-search.php. |
| CVE-2021-41644 | Crítica (9.8) | 2.5% | — | 29 oct 2021 | Remote Code Exection (RCE) vulnerability exists in Sourcecodester Online Food Ordering System 2.0 via a maliciously crafted PHP file that bypasses the image upload filters. |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.
Otros productos de Oretnom23
Online Computer AND Laptop Store · 32Computer Laboratory Management System · 30Online Eyewear Shop · 29Human Resource Management System · 29Lost AND Found Information System · 27Clinic's Patient Management System · 27Customer Support System · 19Food Ordering Management System · 17Simple Online Bidding System · 17AC Repair AND Services System · 16Employee AND Visitor Gate Pass Logging System · 15Employee Task Management System · 15