CVE-2023-0304: SourceCodester Online Food Ordering System Signup Module admin_class.php sql injection

Published Jan 15, 2023

Updated

A vulnerability classified as critical has been found in SourceCodester Online Food Ordering System. This affects an unknown part of the file adminclass.php of the component Signup Module. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-218385 was assigned to this vulnerability.

Affected Software

1 affected component

Online Food Ordering System V2 Project Online Food Ordering System V2

Event History

Jan 15, 2023

CVE Published

11:58 AM

Data Sourced

11:58 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·12:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-0304?

CVE-2023-0304 is classified as a critical vulnerability.

What type of vulnerability is CVE-2023-0304?

CVE-2023-0304 is a SQL injection vulnerability.

How does CVE-2023-0304 affect the system?

CVE-2023-0304 allows an attacker to manipulate the email argument to execute unauthorized SQL commands.

Which component is affected by CVE-2023-0304?

CVE-2023-0304 affects the Signup Module in the admin_class.php file.

How can I fix CVE-2023-0304?

To fix CVE-2023-0304, you should validate and sanitize user inputs to prevent SQL injection.