CVE-2023-45339: Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
Published Nov 2, 2023
·Updated
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Affected Software
1 affected component
Projectworlds Online Food Ordering System=1.0
Event History
Nov 2, 2023
CVE Published
01:35 PM
Rejected
01:35 PM
Data Sourced
via NVD·02:15 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2023-45339?
The severity of CVE-2023-45339 is critical with a score of 9.8.
2
What is the vulnerability in Online Food Ordering System v1.0?
The vulnerability in Online Food Ordering System v1.0 is multiple Unauthenticated SQL Injections (SQLi).
3
How does the vulnerability in Online Food Ordering System v1.0 impact the application?
The 'type' parameter of the routers/add-ticket.php resource allows unauthenticated users to perform SQL Injection attacks, potentially compromising the integrity and confidentiality of the database.
4
What software version is affected by CVE-2023-45339?
The affected software version is Online Food Ordering System v1.0.
5
Are there any references for CVE-2023-45339?
Yes, you can find more information about CVE-2023-45339 at the following references: - Fluid Attacks Advisory: https://fluidattacks.com/advisories/hann - Project Worlds: https://projectworlds.in/