Canteen Management System vulnerabilities

7 known vulnerabilities in Canteen Management System from Canteen Management System Project. 7 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Canteen Management System: Unrestricted Upload of File with Dangerous Type

  CVE-2022-43265Nov 15, 2022Canteen Management System ProjectEPSS 1.17%

  An arbitrary file upload vulnerability in the component /pages/save_user.php of Canteen Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.

• 7.2 High severity

  Canteen Management System: Unrestricted Upload of File with Dangerous Type

  CVE-2022-43146Nov 14, 2022Canteen Management System ProjectEPSS 1.31%

  An arbitrary file upload vulnerability in the image upload function of Canteen Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.

• 7.2 High severity

  Canteen Management System: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-43278Nov 9, 2022Canteen Management System Project

  Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the categoriesId parameter at /php_action/fetchSelectedCategories.php.

• 7.2 High severity

  Canteen Management System: Unrestricted Upload of File with Dangerous Type

  CVE-2022-43277Nov 9, 2022Canteen Management System ProjectEPSS 1.24%

  Canteen Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via ip/youthappam/php_action/editFile.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.

• 7.2 High severity

  Canteen Management System: Unrestricted Upload of File with Dangerous Type

  CVE-2022-43231Oct 28, 2022Canteen Management System ProjectEPSS 1.39%

  Canteen Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via /youthappam/manage_website.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.

• 7.2 High severity

  Canteen Management System: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-43276Oct 28, 2022Canteen Management System Project

  Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the productId parameter at /php_action/fetchSelectedfood.php.

• 7.2 High severity

  Canteen Management System: Unrestricted Upload of File with Dangerous Type

  CVE-2022-43275Oct 28, 2022Canteen Management System ProjectEPSS 1.27%

  Canteen Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via /youthappam/php_action/editProductImage.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.