SourceCodester Food Ordering Management System POST Parameter router.php sql injection

A vulnerability classified as critical has been found in SourceCodester Food Ordering Management System. This affects an unknown part of the file router.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-209583.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

对消息或数据结构的处理不恰当

SourceCodester Food Ordering Management System 安全漏洞

Food Ordering Management System是Carlo Montero个人开发者的一个食品订购管理系统。提供了一个在线平台，可以在某个餐厅或快餐连锁店订购食物。 SourceCodester Food Ordering Management System存在安全漏洞，该漏洞源于对参数用户名的操作会导致sql注入，该漏洞可以远程发起攻击，漏洞利用已向公众披露并可能被使用。

N/A

N/A