Simple Food Ordering System vulnerabilities
11 known vulnerabilities in Simple Food Ordering System from code-projects. 11 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
Simple Food Ordering System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was detected in code-projects Simple Food Ordering System 1.0. Affected by this issue is some unknown functionality of the file all-tickets.php. The manipulation of the argument Status results in sql injection. It is possible to launch the atta
- 7.5 High severity
Simple Food Ordering System: Direct Request
A security vulnerability has been detected in code-projects Simple Food Ordering System up to 1.0. Affected by this vulnerability is an unknown functionality of the file /food/sql/food.sql of the component Database Backup Handler. The manipulation leads to fil
- 8.8 High severity
Simple Food Ordering System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was determined in code-projects Simple Food Ordering System 1.0. Affected by this issue is some unknown functionality of the file /listorder.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched re
- 8.8 High severity
Simple Food Ordering System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in code-projects Simple Food Ordering System 1.0. Affected by this issue is some unknown functionality of the file /saveorder.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack r
- 9.8 Critical severity
Simple Food Ordering System: Unrestricted Upload of File with Dangerous Type
A security flaw has been discovered in code-projects Simple Food Ordering System 1.0. This issue affects some unknown processing of the file /addproduct.php. Performing manipulation of the argument photo results in unrestricted upload. The attack may be initia
- 9.8 Critical severity
Simple Food Ordering System: Unrestricted Upload of File with Dangerous Type
A security vulnerability has been detected in code-projects Simple Food Ordering System 1.0. Impacted is an unknown function of the file /editproduct.php. Such manipulation of the argument photo leads to unrestricted upload. The attack can be launched remotely
- 8.8 High severity
Simple Food Ordering System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Simple Food Ordering System 1.0. Affected is an unknown function of the file /addcategory.php. The manipulation of the argument cname results in sql injection. The attack can be launched remotely. The exploit has been
- 8.8 High severity
Simple Food Ordering System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in code-projects Simple Food Ordering System 1.0. This impacts an unknown function of the file /addproduct.php. The manipulation of the argument Category leads to sql injection. The attack can be initiated remotely. The exploit h
- 8.8 High severity
Simple Food Ordering System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Simple Food Ordering System 1.0. This vulnerability affects unknown code of the file /editproduct.php. The manipulation of the argument Category results in sql injection. The attack may be launched remotely. The explo
- 8.8 High severity
Simple Food Ordering System: Improper Neutralization of Special Elements used in an SQL Command
A security vulnerability has been detected in code-projects Simple Food Ordering System 1.0. Affected is an unknown function of the file editcategory.php. Such manipulation of the argument cname leads to sql injection. It is possible to launch the attack remot
- 9.8 Critical severity
Simple Food Ordering System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in code-projects Simple Food Ordering System 1.0. Impacted is an unknown function of the file /product.php. Such manipulation of the argument Category leads to sql injection. The attack can be launched remotely. The exploit is pu