codeastro Online Food Ordering System vulnerabilities

Latest codeastro Online Food Ordering System CVEs

Newest publication first

1. CVE-2024-13070 CodeAstro Online Food Ordering System Update User Page update_users.php sql injection

   Published 2024-12-31

   Medium·CVSS 5.3 EPSS 0.55%

   A vulnerability was found in CodeAstro Online Food Ordering System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/update_users.php of the component Update User Page. The manipulation of the argument user_upd le...

2. CVE-2024-13067 CodeAstro Online Food Ordering System All Users Page all_users.php access control

   Published 2024-12-31

   Medium·CVSS 6.9 EPSS 0.85%

   A vulnerability was found in CodeAstro Online Food Ordering System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/all_users.php of the component All Users Page. The manipulation leads to improper access controls. The attack may be in...

3. CVE-2024-0423 CodeAstro Online Food Ordering System dishes.php cross site scripting

   Published 2024-01-11

   Medium·CVSS 5.4 EPSS 0.53%

   A vulnerability was found in CodeAstro Online Food Ordering System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file dishes.php. The manipulation of the argument res_id leads to cross site scripting. The attack may be launched...

4. CVE-2024-0247 CodeAstro Online Food Ordering System Admin Panel sql injection

   Published 2024-01-05

   Critical·CVSS 9.8 EPSS 0.78%

   A vulnerability classified as critical was found in CodeAstro Online Food Ordering System 1.0. This vulnerability affects unknown code of the file /admin/ of the component Admin Panel. The manipulation of the argument Username leads to sql injection. The attack can be initiated r...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.