Vulnerabilities > Canteen Management System Project > Canteen Management System > High

DATE CVE VULNERABILITY TITLE RISK
2023-02-06 CVE-2023-0679 SQL Injection vulnerability in Canteen Management System Project Canteen Management System 1.0
A vulnerability was found in SourceCodester Canteen Management System 1.0.
network
high complexity
canteen-management-system-project CWE-89
8.1
2022-12-11 CVE-2022-4403 SQL Injection vulnerability in Canteen Management System Project Canteen Management System
A vulnerability classified as critical was found in SourceCodester Canteen Management System.
network
low complexity
canteen-management-system-project CWE-89
8.8
2022-11-14 CVE-2022-43146 Unrestricted Upload of File with Dangerous Type vulnerability in Canteen Management System Project Canteen Management System 1.0
An arbitrary file upload vulnerability in the image upload function of Canteen Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.
7.2
2022-11-09 CVE-2022-43277 Unrestricted Upload of File with Dangerous Type vulnerability in Canteen Management System Project Canteen Management System 1.0
Canteen Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via ip/youthappam/php_action/editFile.php.
7.2
2022-11-09 CVE-2022-43278 SQL Injection vulnerability in Canteen Management System Project Canteen Management System 1.0
Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the categoriesId parameter at /php_action/fetchSelectedCategories.php.
network
low complexity
canteen-management-system-project CWE-89
7.2
2022-11-09 CVE-2022-43290 SQL Injection vulnerability in Canteen Management System Project Canteen Management System 1.0
Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /youthappam/editcategory.php.
network
low complexity
canteen-management-system-project CWE-89
7.2
2022-11-09 CVE-2022-43291 SQL Injection vulnerability in Canteen Management System Project Canteen Management System 1.0
Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /youthappam/editclient.php.
network
low complexity
canteen-management-system-project CWE-89
7.2
2022-11-09 CVE-2022-43292 SQL Injection vulnerability in Canteen Management System Project Canteen Management System 1.0
Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /youthappam/editfood.php.
network
low complexity
canteen-management-system-project CWE-89
7.2
2022-11-07 CVE-2022-43049 SQL Injection vulnerability in Canteen Management System Project Canteen Management System 1.0
Canteen Management System Project v1.0 was discovered to contain a SQL injection vulnerability via the component /youthappam/add-food.php.
network
low complexity
canteen-management-system-project CWE-89
7.2
2022-11-01 CVE-2022-43328 SQL Injection vulnerability in Canteen Management System Project Canteen Management System 1.0
Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /editorder.php.
network
low complexity
canteen-management-system-project CWE-89
7.2