by Kastro
Paper/Archive/CVE-2023-37627

CVE-2023-37627

mitre — Code-projects Online Restaurant Management System 1.0 is vulnerable to SQL Injection.

EPSS 0.9%public exploitCVSS 9.8
critical.is priorityof 100
51
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 59.4.594 × 2011.9Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

Code-projects Online Restaurant Management System 1.0 is vulnerable to SQL Injection. Through SQL injection, an attacker can bypass the admin panel and view order records, add items, delete items etc.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

refcode-projects.org/online-restaurant-management-system-in-php-with-source-coderefgist.github.com/1337kid/d3e7702bd19cc9355a6b3f153eb2fe8e