Approved changes feed: RSS · Atom

cpe:2.3:a:online_food_ordering_system_project:online_food_ordering_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorOnline Food Ordering System Project (c356f228-67b9-5ec0-8f98-8f85d664120e)
ProductOnline Food Ordering System (2e6aadd7-a7ec-573c-8445-b9ea0c2d60c8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-0247 vulnerable 2026-06-08 06:22:00.135123 CodeAstro Online Food Ordering System Admin Panel sql injection
HIGH (7.3)
A vulnerability classified as critical was found in CodeAstro Online Food Ordering System 1.0. This vulnerability affects unknown code of the file /admin/ of the component Admin Panel. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-249778 is the identifier assigned to this vulnerability.
Published: 2024-01-05T19:00:04.541Z
Updated: 2024-11-14T18:11:45.223Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27073 vulnerable 2026-06-08 05:57:40.594965 Details available
A Cross-Site Request Forgery (CSRF) in Online Food Ordering System v1.0 allows attackers to change user details and credentials via a crafted POST request.
Published: 2023-03-14T00:00:00.000Z
Updated: 2025-02-27T19:59:12.701Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36759 vulnerable 2026-06-08 05:46:07.703719 Details available
Online Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the component /dishes.php?res_id=.
Published: 2022-09-02T02:37:42.000Z
Updated: 2024-08-03T10:14:28.082Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29651 vulnerable 2026-06-08 05:42:48.732418 Details available
An arbitrary file upload vulnerability in the Select Image function of Online Food Ordering System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.
Published: 2022-05-25T12:50:50.000Z
Updated: 2024-08-03T06:26:06.663Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29650 vulnerable 2026-06-08 05:42:48.731148 Details available
Online Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the Search parameter at /online-food-order/food-search.php.
Published: 2022-05-25T12:50:50.000Z
Updated: 2024-08-03T06:26:06.647Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-29297 vulnerable 2026-06-08 05:24:58.075283 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.