CVE-2023-5423

Опубликовано: 05 окт. 2023

Источник: nvd

CVSS3: 4.7

CVSS3: 9.8

CVSS2: 5.8

EPSS Низкий

Описание

A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/ajax.php?action=confirm_order. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The identifier of this vulnerability is VDB-241384.

Ссылки

https://vuldb.com/?ctiid.241384
Permissions Required
Third Party Advisory
https://vuldb.com/?id.241384
Permissions Required
Third Party Advisory
https://vuldb.com/?ctiid.241384
Permissions Required
Third Party Advisory
https://vuldb.com/?id.241384
Permissions Required
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:oretnom23:online_pizza_ordering_system:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 11%

0.00037

Низкий

4.7 Medium

CVSS3

9.8 Critical

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-c5wv-vc39-89q6

CVSS3: 4.7

github

больше 2 лет назад

EPSS

Процентиль: 11%

0.00037

Низкий

4.7 Medium

CVSS3

9.8 Critical

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-89