Online Food Ordering System
Approved changes feed: RSS · Atom
cpe:2.3:a:sourcecodester:online_food_ordering_system:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sourcecodester (f6c988b2-f9bb-51b9-8f02-f23eef2a7551) |
|---|---|
| Product | Online Food Ordering System (7b5b5d01-4b71-566e-a7fa-97163a0aca81) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-5811 |
vulnerable | 2026-06-08 08:07:04.123884 |
SourceCodester Online Food Ordering System POST Parameter Actions.php save_product logic error
MEDIUM (5.4)
A vulnerability was identified in SourceCodester Online Food Ordering System 1.0. Affected by this issue is the function save_product of the file /Actions.php of the component POST Parameter Handler. Such manipulation of the argument price leads to business logic errors. The attack may be performed from remote. The exploit is publicly available and might be used.
Published: 2026-04-08T22:15:13.008Z
Updated: 2026-04-09T13:18:59.568Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-10694 |
vulnerable | 2026-06-08 07:47:13.847332 |
SourceCodester Online Food Ordering System index.php include file inclusion
HIGH (7.3)
A vulnerability was detected in SourceCodester Online Food Ordering System 2.0. Affected by this issue is the function include of the file /index.php. The manipulation of the argument page results in file inclusion. The attack can be launched remotely. The exploit is now public and may be used.
Published: 2026-06-03T00:15:08.880Z
Updated: 2026-06-03T12:29:00.364Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2387 |
vulnerable | 2026-06-08 07:16:56.942985 |
SourceCodester Online Food Ordering System ajax.php sql injection
HIGH (7.3)
A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been classified as critical. Affected is an unknown function of the file /admin/ajax.php?action=add_to_cart. The manipulation of the argument pid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-03-17T17:31:05.462Z
Updated: 2025-03-17T18:23:27.462Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8604 |
vulnerable | 2026-06-08 07:00:25.188680 |
SourceCodester Online Food Ordering System Create an Account Page index.php cross site scripting
MEDIUM (4.3)
A vulnerability classified as problematic has been found in SourceCodester Online Food Ordering System 2.0. This affects an unknown part of the file index.php of the component Create an Account Page. The manipulation of the argument First Name/Last Name leads to cross site scripting. It is possible to initiate the attack remotely.
Published: 2024-09-09T16:00:04.833Z
Updated: 2024-09-09T20:01:05.475Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-1432 |
vulnerable | 2026-06-08 05:52:35.910735 |
SourceCodester Online Food Ordering System POST Request access control
HIGH (7.3)
A vulnerability was found in SourceCodester Online Food Ordering System 2.0 and classified as critical. Affected by this issue is some unknown functionality of the file /fos/admin/ajax.php?action=save_settings of the component POST Request Handler. The manipulation leads to improper access controls. The attack may be launched remotely. VDB-223214 is the identifier assigned to this vulnerability.
Published: 2023-03-16T12:50:01.127Z
Updated: 2024-08-02T05:49:11.435Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0332 |
vulnerable | 2026-06-08 05:52:04.767459 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0305 |
vulnerable | 2026-06-08 05:52:04.719683 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0304 |
vulnerable | 2026-06-08 05:52:04.719220 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0303 |
vulnerable | 2026-06-08 05:52:04.717011 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0258 |
vulnerable | 2026-06-08 05:52:04.616753 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0257 |
vulnerable | 2026-06-08 05:52:04.616363 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0256 |
vulnerable | 2026-06-08 05:52:04.613735 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.