PT-2026-104657 · Unknown · Food-Waste-Management-System
CVSS v2.0
6.5
متوسطة
| المتجه | AV:N/AC:L/Au:S/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
kishor-23 food-waste-management-system (affected versions not specified)
Description
An issue exists in the Order Assignment Block component within the
admin/admin.php file. Remote manipulation of the order id or delivery person id arguments can lead to SQL injection, a technique where malicious SQL statements are inserted into entry fields for execution.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
As a temporary workaround, restrict access to the
admin/admin.php file to minimize the risk of exploitation.استغلال
SQL injection
Special Elements Injection
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾
المعرّفات ذات الصلة
المنتجات المتأثرة
Food-Waste-Management-System