Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-41647
9.1
CRITICALCVSS v3
Published
October 1, 2021
CVSS v2
6.4 MEDIUM
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
An un-authenticated error-based and time-based blind SQL injection vulnerability exists in Kaushik Jadhav Online Food Ordering Web App 1.0. An attacker can exploit the vulnerable "username" parameter in login.php and retrieve sensitive database information, as well as add an administrative user.
kaushikjadhav01/Online-Food-Ordering-Web-App
GitHubOnline Food Ordering System Website using basic PHP, SQL, HTML & CSS. You can use any one of XAMPP, WAMP or LAMP server to run the Web App
GitHubOnline Food Ordering System Website using basic PHP, SQL, HTML & CSS. You can use any one of XAMPP, WAMP or LAMP server to run the Web App= 1.0NVD