CVE-2023-45344: Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Published Nov 2, 2023

Updated

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'balance' parameter of the routers/user-router.php resource does not validate the characters received and they are sent unfiltered to the database.

Affected Software

1 affected component

Projectworlds Online Food Ordering System=1.0

Event History

Nov 2, 2023

CVE Published

01:57 PM

Data Sourced

01:57 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2023-45344.

What is the title of this vulnerability?

The title of this vulnerability is 'Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)'.

What is affected by this vulnerability?

The Online Food Ordering System v1.0 is affected by this vulnerability.

What is the severity of CVE-2023-45344?

The severity of CVE-2023-45344 is critical with a CVSS score of 9.8.

How can I fix this vulnerability?

To fix this vulnerability, apply the relevant patches or updates provided by Projectworlds. Additionally, ensure proper input validation is implemented in the affected routers/user-router.php resource to prevent unauthenticated SQL injections.