CVE-2023-0303

Name of the Vulnerable Software and Affected Versions SourceCodester Online Food Ordering System (affected versions not specified)

Description A critical issue was found in the SourceCodester Online Food Ordering System, affecting some unknown functionality of the file view prod.php. The manipulation of the id argument leads to sql injection. The attack can be launched remotely.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the view prod.php file or disabling the functionality that uses the id argument to minimize the risk of exploitation.