CVE-2023-37627

Code-projects Online Restaurant Management System 1.0 is vulnerable to SQL Injection. Through SQL injection, an attacker can bypass the admin panel and view order records, add items, delete items etc.

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.89% chance of exploitation in the next 30 days, 59th percentile

Published

2023-07-12

Updated

2024-11-07

Proof-of-concept exploits (1)

• https://gist.github.com/1337kid/d3e7702bd19cc9355a6b3f153eb2fe8e

Security advisories

• https://code-projects.org/online-restaurant-management-system-in-php-with-source-code

References

• CVE Record
• NVD entry