CVE-2023-36968
HIGH 7.2EPSS 0.9%
A SQL Injection vulnerability detected in Food Ordering System v1.0 allows attackers to run commands on the database by sending crafted SQL queries to the ID parameter.
- CVSS v3.1 NVD
- 7.2 HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - EPSS
- 0.90% chance of exploitation in the next 30 days, 59th percentile
- Published
- 2023-07-06
- Updated
- 2024-11-19
Proof-of-concept exploits (1)
Security advisories
- https://okankurtulus.com.tr/2023/06/21/food-ordering-system-v1-0-authenticated-sql-inject…
- haxxorsid/food-ordering-system