Canteen Management System Project

Canteen Management System

33 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2022-4234

Exploit
  • EPSS 0.21%
  • Veröffentlicht 30.11.2022 17:15:10
  • Zuletzt bearbeitet 21.11.2024 07:34:50

A vulnerability was found in SourceCodester Canteen Management System. It has been rated as problematic. This issue affects the function builtin_echo of the file youthappam/brand.php. The manipulation of the argument brand_name leads to cross site sc...

9.8

CVE-2022-4222

Exploit
  • EPSS 0.22%
  • Veröffentlicht 30.11.2022 07:15:09
  • Zuletzt bearbeitet 21.11.2024 07:34:49

A vulnerability was found in SourceCodester Canteen Management System. It has been rated as critical. This issue affects the function query of the file ajax_invoice.php of the component POST Request Handler. The manipulation of the argument search le...

6.1

CVE-2022-4091

Exploit
  • EPSS 0.21%
  • Veröffentlicht 25.11.2022 08:15:10
  • Zuletzt bearbeitet 21.11.2024 07:34:34

A vulnerability was found in SourceCodester Canteen Management System. It has been classified as problematic. This affects the function query of the file food.php. The manipulation of the argument product_name leads to cross site scripting. It is pos...

9.8

CVE-2022-43265

  • EPSS 0.83%
  • Veröffentlicht 15.11.2022 21:15:38
  • Zuletzt bearbeitet 30.04.2025 15:15:58

An arbitrary file upload vulnerability in the component /pages/save_user.php of Canteen Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.

7.2

CVE-2022-43146

  • EPSS 0.86%
  • Veröffentlicht 14.11.2022 21:15:19
  • Zuletzt bearbeitet 01.05.2025 14:15:29

An arbitrary file upload vulnerability in the image upload function of Canteen Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.

7.2

CVE-2022-43277

Exploit
  • EPSS 0.94%
  • Veröffentlicht 09.11.2022 16:15:18
  • Zuletzt bearbeitet 01.05.2025 16:15:23

Canteen Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via ip/youthappam/php_action/editFile.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.

7.2

CVE-2022-43278

Exploit
  • EPSS 0.26%
  • Veröffentlicht 09.11.2022 16:15:18
  • Zuletzt bearbeitet 01.05.2025 16:15:23

Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the categoriesId parameter at /php_action/fetchSelectedCategories.php.

7.2

CVE-2022-43292

Exploit
  • EPSS 0.26%
  • Veröffentlicht 09.11.2022 15:15:13
  • Zuletzt bearbeitet 01.05.2025 16:15:24

Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /youthappam/editfood.php.

7.2

CVE-2022-43291

Exploit
  • EPSS 0.26%
  • Veröffentlicht 09.11.2022 15:15:13
  • Zuletzt bearbeitet 01.05.2025 16:15:24

Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /youthappam/editclient.php.

7.2

CVE-2022-43290

Exploit
  • EPSS 0.26%
  • Veröffentlicht 09.11.2022 15:15:13
  • Zuletzt bearbeitet 01.05.2025 16:15:24

Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /youthappam/editcategory.php.