CVE-2023-45342: Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Published Nov 2, 2023

Updated

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'phone' parameter of the routers/register-router.php resource does not validate the characters received and they are sent unfiltered to the database.

Affected Software

1 affected component

Projectworlds Online Food Ordering System=1.0

Event History

Nov 2, 2023

CVE Published

01:47 PM

Data Sourced

01:47 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2023-45342?

CVE-2023-45342 is a vulnerability in the Online Food Ordering System v1.0 that allows for multiple unauthenticated SQL injections.

How severe is CVE-2023-45342?

CVE-2023-45342 is considered critical with a severity rating of 9.8.

What is the affected software of CVE-2023-45342?

The affected software is Online Food Ordering System v1.0.

How does CVE-2023-45342 work?

CVE-2023-45342 works by not validating the 'phone' parameter of the routers/register-router.php resource, allowing unfiltered characters to be sent to the database, leading to SQL injections.

Are there any references related to CVE-2023-45342?

Yes, you can find more information about CVE-2023-45342 at the following references: [1] https://fluidattacks.com/advisories/hann, [2] https://projectworlds.in/