SQL Injection Vulnerability in Online Pizza Ordering System by SourceCodester
CVE-2023-27210

9.8CRITICAL

Key Information:

Vendor: Online Pizza Ordering System Project
Status: Online Pizza Ordering System
Vendor: CVE Published:; 9 March 2023

🔔 Create Online Pizza Ordering System Project Vulnerability Alert

What is CVE-2023-27210?

The Online Pizza Ordering System version 1.0 is vulnerable to a SQL injection attack via the 'id' parameter in the /admin/view_order.php endpoint. This flaw allows an attacker to manipulate the SQL queries executed by the application, potentially leading to unauthorized access to sensitive data. It is critical for administrators using this system to apply security best practices immediately to protect against exploitation.

References

https://www.sourcecodester.com/php/16166/online-pizza-ord...

https://github.com/xiumulty/CVE/blob/main/online%20pizza%...

CVSS V3.1

Score:

9.8

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Mar 9, 2023
Vulnerability Reserved
Feb 27, 2023

CVE-2023-27210 Data

JSON