CVE-2023-40749
CriticalCVSS 9.8Exploitation Probability (EPSS)
High risk87th percentile - higher than 87% of all known CVEs
Summary
PHPJabbers Food Delivery Script v3.0 is vulnerable to SQL Injection in the 'column' parameter of index.php.
Risk Assessment
Exploitation of this vulnerability could lead to unauthorized access to the database and leakage of sensitive information.
Recommendation
It is recommended to update the script to the latest version and validate and sanitize input data in the application.
Other vulnerabilities in PHPJabbers Food Delivery Script v3.0
See all- CVE-2023-40757Critical
User enumeration is found in PHPJabbers Food Delivery Script v3.1. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.
- CVE-2023-40748Critical
PHPJabbers Food Delivery Script version 3.0 has a SQL injection (SQLi) vulnerability in the 'q' parameter of index.php.
Original NVD description (English source)
PHPJabbers Food Delivery Script v3.0 is vulnerable to SQL Injection in the "column" parameter of index.php.