CVE-2023-45336: Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Published Nov 2, 2023

Updated

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'password' parameter of the routers/router.php resource does not validate the characters received and they are sent unfiltered to the database.

Affected Software

1 affected component

Projectworlds Online Food Ordering System=1.0

Event History

Nov 2, 2023

CVE Published

01:26 PM

Data Sourced

01:26 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2023-45336?

The severity of CVE-2023-45336 is critical, with a CVSS v3 score of 9.8.

What is CVE-2023-45336?

CVE-2023-45336 refers to multiple unauthenticated SQL injection vulnerabilities in the Online Food Ordering System v1.0.

How does CVE-2023-45336 affect Online Food Ordering System v1.0?

CVE-2023-45336 allows attackers to execute arbitrary SQL queries on the Online Food Ordering System v1.0 database without authentication.

How can I fix CVE-2023-45336 in Online Food Ordering System v1.0?

To fix CVE-2023-45336, it is recommended to validate and sanitize user input for the 'password' parameter in the routers/router.php resource to prevent SQL injection attacks.

Where can I find more information about CVE-2023-45336?

You can find more information about CVE-2023-45336 at the following references: [Fluid Attacks Advisory](https://fluidattacks.com/advisories/hann) and [Project Worlds](https://projectworlds.in/).