Approved changes feed: RSS · Atom

cpe:2.3:a:sourcecodester:online_pizza_ordering_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSourcecodester (f6c988b2-f9bb-51b9-8f02-f23eef2a7551)
ProductOnline Pizza Ordering System (8f8d5d84-f5f3-507d-b382-1047627d0f75)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-5423 vulnerable 2026-06-08 06:19:43.573135 SourceCodester Online Pizza Ordering System sql injection
MEDIUM (4.7)
A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/ajax.php?action=confirm_order. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The identifier of this vulnerability is VDB-241384.
Published: 2023-10-05T17:00:07.714Z
Updated: 2024-08-02T07:59:44.769Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-2246 vulnerable 2026-06-08 06:02:41.677714 SourceCodester Online Pizza Ordering System unrestricted upload
MEDIUM (6.3)
A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. This vulnerability affects unknown code of the file admin/ajax.php?action=save_settings. The manipulation of the argument img leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-227236.
Published: 2023-04-23T15:31:04.034Z
Updated: 2024-11-22T19:54:02.542Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1460 vulnerable 2026-06-08 05:52:35.946599 SourceCodester Online Pizza Ordering System Password Change improper authentication
MEDIUM (6.5)
A vulnerability was found in SourceCodester Online Pizza Ordering System 1.0. It has been classified as critical. This affects an unknown part of the file admin/ajax.php?action=save_user of the component Password Change Handler. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The identifier VDB-223305 was assigned to this vulnerability.
Published: 2023-03-17T07:51:11.507Z
Updated: 2024-08-02T05:49:11.498Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1455 vulnerable 2026-06-08 05:52:35.942132 SourceCodester Online Pizza Ordering System Login Page sql injection
MEDIUM (5.6)
A vulnerability classified as critical was found in SourceCodester Online Pizza Ordering System 1.0. This vulnerability affects unknown code of the file admin/ajax.php?action=login2 of the component Login Page. The manipulation of the argument email with the input abc%40qq.com' AND (SELECT 9110 FROM (SELECT(SLEEP(5)))XSlc) AND 'jFNl'='jFNl leads to sql injection. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223300.
Published: 2023-03-17T06:58:47.326Z
Updated: 2024-08-02T05:49:11.379Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1392 vulnerable 2026-06-08 05:52:35.756788 SourceCodester Online Pizza Ordering System save_menu unrestricted upload
MEDIUM (6.3)
A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. Affected by this vulnerability is the function save_menu. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222979.
Published: 2023-03-14T14:24:13.917Z
Updated: 2025-02-27T15:57:01.659Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1365 vulnerable 2026-06-08 05:52:35.702900 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1364 vulnerable 2026-06-08 05:52:35.702583 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0988 vulnerable 2026-06-08 05:52:33.580245 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0987 vulnerable 2026-06-08 05:52:33.579556 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0910 vulnerable 2026-06-08 05:52:33.440851 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0906 vulnerable 2026-06-08 05:52:33.433737 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0883 vulnerable 2026-06-08 05:52:33.378670 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.