SQL Injection Vulnerability in Online Pizza Ordering System by SourceCodester
CVE-2023-27207

9.8CRITICAL

Key Information:

Vendor: Online Pizza Ordering System Project
Status: Online Pizza Ordering System
Vendor: CVE Published:; 9 March 2023

🔔 Create Online Pizza Ordering System Project Vulnerability Alert

What is CVE-2023-27207?

The Online Pizza Ordering System version 1.0 is susceptible to SQL injection attacks through the 'id' parameter in the /admin/manage_user.php file. Attackers can exploit this vulnerability to execute arbitrary SQL commands, potentially allowing unauthorized access to the database and manipulation of sensitive information. This issue underscores the importance of secure coding practices and input validation in web application development.

References

https://www.sourcecodester.com/php/16166/online-pizza-ord...

https://github.com/xiumulty/CVE/blob/main/online%20pizza%...

CVSS V3.1

Score:

9.8

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Mar 9, 2023
Vulnerability Reserved
Feb 27, 2023

CVE-2023-27207 Data

JSON