CVE-2023-0305: SourceCodester Online Food Ordering System Login Module admin_class.php sql injection

Published Jan 15, 2023

Updated

A vulnerability classified as critical was found in SourceCodester Online Food Ordering System. This vulnerability affects unknown code of the file adminclass.php of the component Login Module. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-218386 is the identifier assigned to this vulnerability.

Affected Software

1 affected component

Online Food Ordering System V2 Project Online Food Ordering System V2

Event History

Jan 15, 2023

CVE Published

11:58 AM

Data Sourced

11:58 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·12:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-0305?

CVE-2023-0305 is classified as a critical vulnerability.

How do I fix CVE-2023-0305?

To fix CVE-2023-0305, it's recommended to validate and sanitize all user inputs, especially the username parameter, to prevent SQL injection.

What components are affected by CVE-2023-0305?

CVE-2023-0305 affects the Login Module code in the admin_class.php file of the Online Food Ordering System.

What kind of attack can be executed through CVE-2023-0305?

CVE-2023-0305 can be exploited through SQL injection attacks due to improper handling of the username argument.

Which software versions are vulnerable to CVE-2023-0305?

CVE-2023-0305 affects all unspecified versions of the Online Food Ordering System v2 project.