CVE-2023-45323: Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'name' parameter of the routers/add-item.php resource does not validate the characters received and they are sent unfiltered to the database.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for the Online Food Ordering System vulnerability?
The vulnerability ID for the Online Food Ordering System vulnerability is CVE-2023-45323.
What is the severity of CVE-2023-45323?
The severity of CVE-2023-45323 is critical with a severity value of 9.8.
How does the vulnerability in Online Food Ordering System occur?
The vulnerability in Online Food Ordering System occurs due to multiple Unauthenticated SQL Injection vulnerabilities in the 'name' parameter of the routers/add-item.php resource.
What is affected by the Online Food Ordering System vulnerability?
The Online Food Ordering System v1.0 is affected by the vulnerability.
How can I fix the vulnerability in Online Food Ordering System?
To fix the vulnerability in Online Food Ordering System, you need to validate and filter the characters received in the 'name' parameter of the routers/add-item.php resource before sending them to the database.