CVE-2023-45341

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The '*_price' parameter of the routers/menu-router.php resource does not validate the characters received and they are sent unfiltered to the database.

Score
CVSS 3.1 9.8 Critical
Status
Modified - help@fluidattacks.com
Published
2023-11-02
Last modified
2025-06-12
Weaknesses
CWE-89

Affected products

References

 
 
© AVABIS GmbH privacypolicy about