| शीर्षक | CodeAstro Online Food Ordering System 1.0 SQL Injection |
|---|
| विवरण | Vendor and Product Information:
Vendor: CodeAstro
Product: Online Food Ordering System
Product URL: https://codeastro.com/online-food-ordering-system-in-php-mysql-with-source-code/
Confidence: Confirmed
Description:
An SQL injection vulnerability in the "Update User" page can be chained to execute arbitrary code remotely on the server. This could allow attackers to access sensitive data, disrupt services, and compromise the overall availability of the system. |
|---|
| स्रोत | ⚠️ https://github.com/shaturo1337/POCs/blob/main/RCE%20via%20SQL%20Injection%20in%20Online%20Food%20Ordering%20System.md |
|---|
| उपयोगकर्ता | John Correche (UID 79510) |
|---|
| सबमिशन | 30/12/2024 11:18 AM (2 साल पहले) |
|---|
| संयम | 31/12/2024 09:42 AM (22 hours later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 289825 [CodeAstro Online Food Ordering System 1.0 Update User Page /admin/update_users.php user_upd SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|