| शीर्षक | oretnom23 Food Ordering Management System 1.0 SQL Injection |
|---|
| विवरण | SQL Injection Vulnerability in /ffos/admin/menus/view_menu.php
Vendors Link: https://www.sourcecodester.com/php/15366/fast-food-ordering-system-phpoop-free-source-code.html
Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/php-ffos.zip
A critical SQL injection vulnerability exists in the /ffos/admin/menus/view_menu.php endpoint of the application. This vulnerability arises due to insufficient sanitization and validation of user-supplied input, which is directly incorporated into SQL queries. An attacker can exploit this flaw by injecting malicious SQL code through parameters passed to the script, potentially allowing unauthorized access to the database. Successful exploitation could lead to the extraction of sensitive data (such as user credentials, menu details, or other records) |
|---|
| स्रोत | ⚠️ https://hackmd.io/@gnol719/rJqOPiInye |
|---|
| उपयोगकर्ता | longkd719 (UID 82854) |
|---|
| सबमिशन | 18/03/2025 09:14 AM (2 साल पहले) |
|---|
| संयम | 27/03/2025 07:39 AM (9 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 301495 [SourceCodester Food Ordering Management System तक 1.0 view_menu.php id SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|