CVE-2023-45324

02 Jan 2024, 17:15

Type	Values Removed	Values Added
References	{'url': 'https://fluidattacks.com/advisories/hann', 'name': 'https://fluidattacks.com/advisories/hann', 'tags': ['Exploit', 'Third Party Advisory'], 'refsource': 'MISC'} {'url': 'https://projectworlds.in/', 'name': 'https://projectworlds.in/', 'tags': ['Product'], 'refsource': 'MISC'}
CVSS	v2 : unknown v3 : 9.8	v2 : unknown v3 : unknown
CWE	CWE-89
CPE	cpe:2.3:a:projectworlds:online_food_ordering_system:1.0:*:*:*:*:*:*:*
Summary	Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'price' parameter of the routers/add-item.php resource does not validate the characters received and they are sent unfiltered to the database.	Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

---

09 Nov 2023, 15:41

Type	Values Removed	Values Added
First Time		Projectworlds Projectworlds online Food Ordering System
References	(MISC) https://fluidattacks.com/advisories/hann -	(MISC) https://fluidattacks.com/advisories/hann - Exploit, Third Party Advisory
References	(MISC) https://projectworlds.in/ -	(MISC) https://projectworlds.in/ - Product
CPE		cpe:2.3:a:projectworlds:online_food_ordering_system:1.0:*:*:*:*:*:*:*

---

02 Nov 2023, 14:26

Type	Values Removed	Values Added
New CVE

---