Approved changes feed: RSS · Atom

cpe:2.3:a:sourcecodester:friendly_island_pizza_website_and_ordering_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSourcecodester (f6c988b2-f9bb-51b9-8f02-f23eef2a7551)
ProductFriendly Island Pizza Website And Ordering System (99d82f32-81dd-544d-9544-a111880f4dd0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-1418 vulnerable 2026-06-08 05:52:35.800576 SourceCodester Friendly Island Pizza Website and Ordering System POST Parameter cashconfirm.php cross site scripting
LOW (3.5)
A vulnerability classified as problematic was found in SourceCodester Friendly Island Pizza Website and Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file cashconfirm.php of the component POST Parameter Handler. The manipulation of the argument transactioncode leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223129 was assigned to this vulnerability.
Published: 2023-03-15T15:18:33.549Z
Updated: 2024-08-02T05:49:11.277Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1379 vulnerable 2026-06-08 05:52:35.723302 SourceCodester Friendly Island Pizza Website and Ordering System POST Parameter addmem.php sql injection
MEDIUM (6.3)
A vulnerability was found in SourceCodester Friendly Island Pizza Website and Ordering System 1.0. It has been rated as critical. This issue affects some unknown processing of the file addmem.php of the component POST Parameter Handler. The manipulation of the argument firstname leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223127.
Published: 2023-03-15T15:10:28.308Z
Updated: 2025-02-13T21:13:49.773Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1378 vulnerable 2026-06-08 05:52:35.722093 SourceCodester Friendly Island Pizza Website and Ordering System POST Parameter paypalsuccess.php sql injection
MEDIUM (6.3)
A vulnerability classified as critical was found in SourceCodester Friendly Island Pizza Website and Ordering System 1.0. This vulnerability affects unknown code of the file paypalsuccess.php of the component POST Parameter Handler. The manipulation of the argument cusid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222904.
Published: 2023-03-13T17:25:22.844Z
Updated: 2024-08-02T05:49:10.352Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1311 vulnerable 2026-06-08 05:52:34.384785 SourceCodester Friendly Island Pizza Website and Ordering System GET Parameter large.php sql injection
MEDIUM (6.3)
A vulnerability, which was classified as critical, was found in SourceCodester Friendly Island Pizza Website and Ordering System 1.0. This affects an unknown part of the file large.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222699.
Published: 2023-03-10T07:39:49.218Z
Updated: 2025-02-27T21:03:14.398Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1301 vulnerable 2026-06-08 05:52:34.374425 SourceCodester Friendly Island Pizza Website and Ordering System GET Parameter deleteorder.php sql injection
MEDIUM (6.3)
A vulnerability, which was classified as critical, has been found in SourceCodester Friendly Island Pizza Website and Ordering System 1.0. Affected by this issue is some unknown functionality of the file deleteorder.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-222662 is the identifier assigned to this vulnerability.
Published: 2023-03-09T21:31:48.150Z
Updated: 2025-02-28T15:44:02.299Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.