Skip to content

Product

sourcecodester Online Pizza Ordering System vulnerabilities

12 published CVES affecting sourcecodester Online Pizza Ordering System, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
12
Critical
7
High
4
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest sourcecodester Online Pizza Ordering System CVEs

Newest publication first

  1. CriticalCVSS 9.8 EPSS 0.48%

    A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/ajax.php?action=confirm_order. The manipulation of the argument id leads to sql injection. The attack can be in...

  2. CriticalCVSS 9.8 EPSS 3.6%

    A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. This vulnerability affects unknown code of the file admin/ajax.php?action=save_settings. The manipulation of the argument img leads to unrestricted upload. The attack can...

  3. HighCVSS 7.5 EPSS 0.75%

    A vulnerability was found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/ajax.php. The manipulation of the argument username leads to sql injection. The attack may be launched...

  4. MediumCVSS 5.4 EPSS 0.58%

    A vulnerability classified as problematic was found in SourceCodester Online Pizza Ordering System 1.0. This vulnerability affects unknown code of the file index.php?page=checkout. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit h...

  5. CriticalCVSS 9.8 EPSS 0.61%

    A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. This vulnerability affects unknown code of the file /php-opos/index.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely....

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.