CVE-2023-45331: Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
Published Nov 2, 2023
·Updated
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Affected Software
1 affected component
Projectworlds Online Food Ordering System=1.0
Event History
Nov 2, 2023
CVE Published
01:21 PM
Rejected
01:21 PM
Data Sourced
via NVD·02:15 PM
Description
Frequently Asked Questions
1
What is CVE-2023-45331?
CVE-2023-45331 is an identifier for a vulnerability in the Online Food Ordering System v1.0 that allows multiple unauthenticated SQL injections.
2
How severe is CVE-2023-45331?
CVE-2023-45331 is classified as critical with a severity score of 9.8 out of 10.
3
How does CVE-2023-45331 affect the Online Food Ordering System v1.0?
CVE-2023-45331 allows unauthenticated users to perform SQL injections through the 'contact' parameter of the routers/add-users.php resource.
4
What is the affected software for CVE-2023-45331?
The affected software for CVE-2023-45331 is the Online Food Ordering System v1.0 developed by Projectworlds.
5
How can I fix CVE-2023-45331?
To fix CVE-2023-45331, the developer should validate and filter the characters received through the 'contact' parameter of the routers/add-users.php resource to prevent SQL injections.