CVE-2023-37627

Code-projects Online Restaurant Management System 1.0 is vulnerable to SQL Injection. Through SQL injection, an attacker can bypass the admin panel and view order records, add items, delete items etc.

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.89% chance of exploitation in the next 30 days, 57th percentile

Published

2023-07-12

Updated

2024-11-07

Proof-of-concept exploits (1)

• https://gist.github.com/1337kid/d3e7702bd19cc9355a6b3f153eb2fe8e

References

• CVE Record
• NVD entry

Related

• CVE-2023-37625
• CVE-2023-37628
• CVE-2023-3762
• CVE-2023-37629
• CVE-2023-3761
• CVE-2023-3763