GCVE - cpe:2.3:a:simple_food_website_project:simple_food

Approved changes feed: RSS · Atom

cpe:2.3:a:simple_food_website_project:simple_food_website:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

Vendor	Simple Food Website Project (`1bb6362a-d175-5f75-adc0-2d570203207b`)
Product	Simple Food Website (`c0a29d3b-0aaa-5577-9733-8405235434c1`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from NVD CPE 2.0 feed

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-30015`	vulnerable	2026-06-08 05:43:36.879691	Details available In Simple Food Website 1.0, a moderation can put the Cross Site Scripting Payload in any of the fields on http://127.0.0.1:1234/food/admin/all_users.php like Full Username, etc .This causes stored xss. Published: 2022-05-23T20:50:00.000Z Updated: 2024-08-03T06:40:47.506Z Open on db.gcve.eu Reference links https://www.sourcecodester.com/php/12510/simple-food-website-php.html https://github.com/offsecin/bugsdisclose/blob/main/xss	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-30014`	vulnerable	2026-06-08 05:43:36.879175	Details available Lumidek Associates Simple Food Website 1.0 is vulnerable to Cross Site Request Forgery (CSRF) which allows anyone to takeover admin/moderater account. Published: 2022-05-23T15:42:19.000Z Updated: 2026-07-09T00:19:02.883Z Open on db.gcve.eu Reference links https://github.com/offsecin/bugsdisclose/blob/main/csrf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-34166`	vulnerable	2026-06-08 05:32:12.929598	Details available A SQL INJECTION vulnerability in Sourcecodester Simple Food Website 1.0 allows a remote attacker to Bypass Authentication and become Admin. Published: 2021-07-28T15:04:23.000Z Updated: 2024-08-04T00:05:52.459Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/49740	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.