CVEvulnerability
CVE-2023-37627
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2023-07-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-89
Description
Code-projects Online Restaurant Management System 1.0 is vulnerable to SQL Injection. Through SQL injection, an attacker can bypass the admin panel and view order records, add items, delete items etc.
Affected configurations
• code-projects online restaurant management system 1.0
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- https://code-projects.org/online-restaurant-management-system-in-php-with-source-code/ Product
- https://gist.github.com/1337kid/d3e7702bd19cc9355a6b3f153eb2fe8e Exploit, Third Party Advisory
- https://code-projects.org/online-restaurant-management-system-in-php-with-source-code/ Product
- https://gist.github.com/1337kid/d3e7702bd19cc9355a6b3f153eb2fe8e Exploit, Third Party Advisory