CVE-2023-45334: Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'status' parameter of the routers/edit-orders.php resource does not validate the characters received and they are sent unfiltered to the database.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-45334?
CVE-2023-45334 is a vulnerability in the Online Food Ordering System v1.0 that allows multiple unauthenticated SQL injections.
What is the severity of CVE-2023-45334?
The severity of CVE-2023-45334 is critical with a severity value of 9.8.
How does CVE-2023-45334 affect the Online Food Ordering System v1.0?
CVE-2023-45334 affects the Online Food Ordering System v1.0 by allowing unauthenticated SQL injections through the 'status' parameter of the routers/edit-orders.php resource.
How can I fix CVE-2023-45334 in the Online Food Ordering System v1.0?
To fix CVE-2023-45334 in the Online Food Ordering System v1.0, you need to validate and filter the characters received through the 'status' parameter before sending them to the database.
Where can I find more information about CVE-2023-45334?
You can find more information about CVE-2023-45334 at the following references: [https://fluidattacks.com/advisories/hann](https://fluidattacks.com/advisories/hann) and [https://projectworlds.in/](https://projectworlds.in/).