VendorsOnline Pizza Ordering System Projectonline_pizza_ordering_systemall versions
Vulnerabilities

Online Pizza Ordering System Project Online Pizza Ordering System

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

18CVEs
CVE-2023-2246
SourceCodester Online Pizza Ordering System unrestricted upload
Published 2023-04-23 · Modified
9.81 PoCEPSS 0.036
CVE-2023-30092
SourceCodester Online Pizza Ordering System v1.0 is vulnerable to SQL Injection via the QTY parameter.
Published 2023-05-08 · Modified
9.8EPSS 0.010
CVE-2023-1460
SourceCodester Online Pizza Ordering System Password Change improper authentication
Published 2023-03-17 · Modified
9.8EPSS 0.010
CVE-2023-1392
SourceCodester Online Pizza Ordering System save_menu unrestricted upload
Published 2023-03-14 · Modified
9.8EPSS 0.009
CVE-2023-27210
Online Pizza Ordering System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/view_order.php.
Published 2023-03-09 · Modified
9.8EPSS 0.009
CVE-2023-27207
Online Pizza Ordering System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/manage_user.php.
Published 2023-03-09 · Modified
9.8EPSS 0.009
CVE-2023-0906
SourceCodester Online Pizza Ordering System POST Parameter ajax.php delete_category missing authentication
Published 2023-02-18 · Modified
9.8EPSS 0.007
CVE-2023-0883
SourceCodester Online Pizza Ordering System index.php sql injection
Published 2023-02-17 · Modified
9.8EPSS 0.006
CVE-2023-0910
SourceCodester Online Pizza Ordering System GET Parameter view_prod.php sql injection
Published 2023-02-18 · Modified
9.8EPSS 0.005
CVE-2023-0988
SourceCodester Online Pizza Ordering System cross-site request forgery
Published 2023-02-23 · Modified
8.8EPSS 0.005
CVE-2023-1455
SourceCodester Online Pizza Ordering System Login Page sql injection
Published 2023-03-17 · Modified
8.1EPSS 0.006
CVE-2023-1365
SourceCodester Online Pizza Ordering System ajax.php sql injection
Published 2023-03-13 · Modified
7.5EPSS 0.008
CVE-2023-1364
SourceCodester Online Pizza Ordering System GET Parameter category.php sql injection
Published 2023-03-13 · Modified
7.5EPSS 0.006
CVE-2023-37150
Sourcecodester Online Pizza Ordering System v1.0 has a Cross-site scripting (XSS) vulnerability in "/admin/index.php?page=categories" Category item.
Published 2023-07-10 · Modified
6.1EPSS 0.006
CVE-2023-27208
A cross-site scripting (XSS) vulnerability in /php-opos/login.php of Online Pizza Ordering System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the redirect parameter.
Published 2023-03-09 · Modified
6.1EPSS 0.005
CVE-2023-27212
A cross-site scripting (XSS) vulnerability in /php-opos/signup.php of Online Pizza Ordering System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the redirect parameter.
Published 2023-03-09 · Modified
6.1EPSS 0.005
CVE-2023-27211
A cross-site scripting (XSS) vulnerability in /admin/navbar.php of Online Pizza Ordering System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the page parameter.
Published 2023-03-09 · Modified
6.1EPSS 0.004
CVE-2023-0987
SourceCodester Online Pizza Ordering System cross site scripting
Published 2023-02-23 · Modified
5.4EPSS 0.006