CVE-2023-45324

Опубликовано: 02 нояб. 2023

Источник: nvd

Описание

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Связанные уязвимости

GHSA-7qch-j3mw-875r

CVSS3: 9.8

github

больше 2 лет назад

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'price' parameter of the routers/add-item.php resource does not validate the characters received and they are sent unfiltered to the database.